fjall 3.1.0 → 3.2.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
@@ -118,7 +118,7 @@ try {
118
118
 
119
119
  Set the \`cycles\` parameter to \`"ref"\` to resolve cyclical schemas with defs.`)}for(let a of e.seen.entries()){let c=a[1];if(t===a[0]){i(a);continue}if(e.external){let l=e.external.registry.get(a[0])?.id;if(t!==a[0]&&l){i(a);continue}}if(e.metadataRegistry.get(a[0])?.id){i(a);continue}if(c.cycle){i(a);continue}if(c.count>1&&e.reused==="ref"){i(a);continue}}}function Wt(e,t){let n=e.seen.get(t);if(!n)throw new Error("Unprocessed schema. This is a bug in Zod.");let o=c=>{let u=e.seen.get(c);if(u.ref===null)return;let l=u.def??u.schema,m={...l},p=u.ref;if(u.ref=null,p){o(p);let h=e.seen.get(p),$=h.schema;if($.$ref&&(e.target==="draft-07"||e.target==="draft-04"||e.target==="openapi-3.0")?(l.allOf=l.allOf??[],l.allOf.push($)):Object.assign(l,$),Object.assign(l,m),c._zod.parent===p)for(let K in l)K==="$ref"||K==="allOf"||K in m||delete l[K];if($.$ref&&h.def)for(let K in l)K==="$ref"||K==="allOf"||K in h.def&&JSON.stringify(l[K])===JSON.stringify(h.def[K])&&delete l[K]}let g=c._zod.parent;if(g&&g!==p){o(g);let h=e.seen.get(g);if(h?.schema.$ref&&(l.$ref=h.schema.$ref,h.def))for(let $ in l)$==="$ref"||$==="allOf"||$ in h.def&&JSON.stringify(l[$])===JSON.stringify(h.def[$])&&delete l[$]}e.override({zodSchema:c,jsonSchema:l,path:u.path??[]})};for(let c of[...e.seen.entries()].reverse())o(c[0]);let r={};if(e.target==="draft-2020-12"?r.$schema="https://json-schema.org/draft/2020-12/schema":e.target==="draft-07"?r.$schema="http://json-schema.org/draft-07/schema#":e.target==="draft-04"?r.$schema="http://json-schema.org/draft-04/schema#":e.target,e.external?.uri){let c=e.external.registry.get(t)?.id;if(!c)throw new Error("Schema is missing an `id` property");r.$id=e.external.uri(c)}Object.assign(r,n.def??n.schema);let i=e.metadataRegistry.get(t)?.id;i!==void 0&&r.id===i&&delete r.id;let a=e.external?.defs??{};for(let c of e.seen.entries()){let u=c[1];u.def&&u.defId&&(u.def.id===u.defId&&delete u.def.id,a[u.defId]=u.def)}e.external||Object.keys(a).length>0&&(e.target==="draft-2020-12"?r.$defs=a:r.definitions=a);try{let c=JSON.parse(JSON.stringify(r));return Object.defineProperty(c,"~standard",{value:{...t["~standard"],jsonSchema:{input:nn(t,"input",e.processors),output:nn(t,"output",e.processors)}},enumerable:!1,writable:!1}),c}catch{throw new Error("Error converting schema to JSON.")}}function Ie(e,t){let n=t??{seen:new Set};if(n.seen.has(e))return!1;n.seen.add(e);let o=e._zod.def;if(o.type==="transform")return!0;if(o.type==="array")return Ie(o.element,n);if(o.type==="set")return Ie(o.valueType,n);if(o.type==="lazy")return Ie(o.getter(),n);if(o.type==="promise"||o.type==="optional"||o.type==="nonoptional"||o.type==="nullable"||o.type==="readonly"||o.type==="default"||o.type==="prefault")return Ie(o.innerType,n);if(o.type==="intersection")return Ie(o.left,n)||Ie(o.right,n);if(o.type==="record"||o.type==="map")return Ie(o.keyType,n)||Ie(o.valueType,n);if(o.type==="pipe")return e._zod.traits.has("$ZodCodec")?!0:Ie(o.in,n)||Ie(o.out,n);if(o.type==="object"){for(let r in o.shape)if(Ie(o.shape[r],n))return!0;return!1}if(o.type==="union"){for(let r of o.options)if(Ie(r,n))return!0;return!1}if(o.type==="tuple"){for(let r of o.items)if(Ie(r,n))return!0;return!!(o.rest&&Ie(o.rest,n))}return!1}var dm=(e,t={})=>n=>{let o=Bt({...n,processors:t});return L(e,o),Gt(o,e),Wt(o,e)},nn=(e,t,n={})=>o=>{let{libraryOptions:r,target:i}=o??{},a=Bt({...r??{},target:i,io:t,processors:n});return L(e,a),Gt(a,e),Wt(a,e)};var VN={guid:"uuid",url:"uri",datetime:"date-time",json_string:"json-string",regex:""},mm=(e,t,n,o)=>{let r=n;r.type="string";let{minimum:i,maximum:a,format:c,patterns:u,contentEncoding:l}=e._zod.bag;if(typeof i=="number"&&(r.minLength=i),typeof a=="number"&&(r.maxLength=a),c&&(r.format=VN[c]??c,r.format===""&&delete r.format,c==="time"&&delete r.format),l&&(r.contentEncoding=l),u&&u.size>0){let m=[...u];m.length===1?r.pattern=m[0].source:m.length>1&&(r.allOf=[...m.map(p=>({...t.target==="draft-07"||t.target==="draft-04"||t.target==="openapi-3.0"?{type:"string"}:{},pattern:p.source}))])}},pm=(e,t,n,o)=>{let r=n,{minimum:i,maximum:a,format:c,multipleOf:u,exclusiveMaximum:l,exclusiveMinimum:m}=e._zod.bag;typeof c=="string"&&c.includes("int")?r.type="integer":r.type="number";let p=typeof m=="number"&&m>=(i??Number.NEGATIVE_INFINITY),g=typeof l=="number"&&l<=(a??Number.POSITIVE_INFINITY),h=t.target==="draft-04"||t.target==="openapi-3.0";p?h?(r.minimum=m,r.exclusiveMinimum=!0):r.exclusiveMinimum=m:typeof i=="number"&&(r.minimum=i),g?h?(r.maximum=l,r.exclusiveMaximum=!0):r.exclusiveMaximum=l:typeof a=="number"&&(r.maximum=a),typeof u=="number"&&(r.multipleOf=u)},fm=(e,t,n,o)=>{n.type="boolean"},gm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("BigInt cannot be represented in JSON Schema")},vm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Symbols cannot be represented in JSON Schema")},hm=(e,t,n,o)=>{t.target==="openapi-3.0"?(n.type="string",n.nullable=!0,n.enum=[null]):n.type="null"},ym=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Undefined cannot be represented in JSON Schema")},bm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Void cannot be represented in JSON Schema")},Sm=(e,t,n,o)=>{n.not={}},_m=(e,t,n,o)=>{},Em=(e,t,n,o)=>{},Am=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Date cannot be represented in JSON Schema")},$m=(e,t,n,o)=>{let r=e._zod.def,i=to(r.entries);i.every(a=>typeof a=="number")&&(n.type="number"),i.every(a=>typeof a=="string")&&(n.type="string"),n.enum=i},xm=(e,t,n,o)=>{let r=e._zod.def,i=[];for(let a of r.values)if(a===void 0){if(t.unrepresentable==="throw")throw new Error("Literal `undefined` cannot be represented in JSON Schema")}else if(typeof a=="bigint"){if(t.unrepresentable==="throw")throw new Error("BigInt literals cannot be represented in JSON Schema");i.push(Number(a))}else i.push(a);if(i.length!==0)if(i.length===1){let a=i[0];n.type=a===null?"null":typeof a,t.target==="draft-04"||t.target==="openapi-3.0"?n.enum=[a]:n.const=a}else i.every(a=>typeof a=="number")&&(n.type="number"),i.every(a=>typeof a=="string")&&(n.type="string"),i.every(a=>typeof a=="boolean")&&(n.type="boolean"),i.every(a=>a===null)&&(n.type="null"),n.enum=i},Im=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("NaN cannot be represented in JSON Schema")},Tm=(e,t,n,o)=>{let r=n,i=e._zod.pattern;if(!i)throw new Error("Pattern not found in template literal");r.type="string",r.pattern=i.source},Nm=(e,t,n,o)=>{let r=n,i={type:"string",format:"binary",contentEncoding:"binary"},{minimum:a,maximum:c,mime:u}=e._zod.bag;a!==void 0&&(i.minLength=a),c!==void 0&&(i.maxLength=c),u?u.length===1?(i.contentMediaType=u[0],Object.assign(r,i)):(Object.assign(r,i),r.anyOf=u.map(l=>({contentMediaType:l}))):Object.assign(r,i)},Rm=(e,t,n,o)=>{n.type="boolean"},Pm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Custom types cannot be represented in JSON Schema")},Cm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Function types cannot be represented in JSON Schema")},km=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Transforms cannot be represented in JSON Schema")},Om=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Map cannot be represented in JSON Schema")},Dm=(e,t,n,o)=>{if(t.unrepresentable==="throw")throw new Error("Set cannot be represented in JSON Schema")},wm=(e,t,n,o)=>{let r=n,i=e._zod.def,{minimum:a,maximum:c}=e._zod.bag;typeof a=="number"&&(r.minItems=a),typeof c=="number"&&(r.maxItems=c),r.type="array",r.items=L(i.element,t,{...o,path:[...o.path,"items"]})},zm=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="object",r.properties={};let a=i.shape;for(let l in a)r.properties[l]=L(a[l],t,{...o,path:[...o.path,"properties",l]});let c=new Set(Object.keys(a)),u=new Set([...c].filter(l=>{let m=i.shape[l]._zod;return t.io==="input"?m.optin===void 0:m.optout===void 0}));u.size>0&&(r.required=Array.from(u)),i.catchall?._zod.def.type==="never"?r.additionalProperties=!1:i.catchall?i.catchall&&(r.additionalProperties=L(i.catchall,t,{...o,path:[...o.path,"additionalProperties"]})):t.io==="output"&&(r.additionalProperties=!1)},Ua=(e,t,n,o)=>{let r=e._zod.def,i=r.inclusive===!1,a=r.options.map((c,u)=>L(c,t,{...o,path:[...o.path,i?"oneOf":"anyOf",u]}));i?n.oneOf=a:n.anyOf=a},Mm=(e,t,n,o)=>{let r=e._zod.def,i=L(r.left,t,{...o,path:[...o.path,"allOf",0]}),a=L(r.right,t,{...o,path:[...o.path,"allOf",1]}),c=l=>"allOf"in l&&Object.keys(l).length===1,u=[...c(i)?i.allOf:[i],...c(a)?a.allOf:[a]];n.allOf=u},jm=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="array";let a=t.target==="draft-2020-12"?"prefixItems":"items",c=t.target==="draft-2020-12"||t.target==="openapi-3.0"?"items":"additionalItems",u=i.items.map((g,h)=>L(g,t,{...o,path:[...o.path,a,h]})),l=i.rest?L(i.rest,t,{...o,path:[...o.path,c,...t.target==="openapi-3.0"?[i.items.length]:[]]}):null;t.target==="draft-2020-12"?(r.prefixItems=u,l&&(r.items=l)):t.target==="openapi-3.0"?(r.items={anyOf:u},l&&r.items.anyOf.push(l),r.minItems=u.length,l||(r.maxItems=u.length)):(r.items=u,l&&(r.additionalItems=l));let{minimum:m,maximum:p}=e._zod.bag;typeof m=="number"&&(r.minItems=m),typeof p=="number"&&(r.maxItems=p)},Um=(e,t,n,o)=>{let r=n,i=e._zod.def;r.type="object";let a=i.keyType,u=a._zod.bag?.patterns;if(i.mode==="loose"&&u&&u.size>0){let m=L(i.valueType,t,{...o,path:[...o.path,"patternProperties","*"]});r.patternProperties={};for(let p of u)r.patternProperties[p.source]=m}else(t.target==="draft-07"||t.target==="draft-2020-12")&&(r.propertyNames=L(i.keyType,t,{...o,path:[...o.path,"propertyNames"]})),r.additionalProperties=L(i.valueType,t,{...o,path:[...o.path,"additionalProperties"]});let l=a._zod.values;if(l){let m=[...l].filter(p=>typeof p=="string"||typeof p=="number");m.length>0&&(r.required=m)}},Lm=(e,t,n,o)=>{let r=e._zod.def,i=L(r.innerType,t,o),a=t.seen.get(e);t.target==="openapi-3.0"?(a.ref=r.innerType,n.nullable=!0):n.anyOf=[i,{type:"null"}]},Fm=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},Zm=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,n.default=JSON.parse(JSON.stringify(r.defaultValue))},Vm=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,t.io==="input"&&(n._prefault=JSON.parse(JSON.stringify(r.defaultValue)))},Bm=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType;let a;try{a=r.catchValue(void 0)}catch{throw new Error("Dynamic catch values are not supported in JSON Schema")}n.default=a},Gm=(e,t,n,o)=>{let r=e._zod.def,i=r.in._zod.traits.has("$ZodTransform"),a=t.io==="input"?i?r.out:r.in:r.out;L(a,t,o);let c=t.seen.get(e);c.ref=a},Wm=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType,n.readOnly=!0},Km=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},La=(e,t,n,o)=>{let r=e._zod.def;L(r.innerType,t,o);let i=t.seen.get(e);i.ref=r.innerType},Hm=(e,t,n,o)=>{let r=e._zod.innerType;L(r,t,o);let i=t.seen.get(e);i.ref=r},ja={string:mm,number:pm,boolean:fm,bigint:gm,symbol:vm,null:hm,undefined:ym,void:bm,never:Sm,any:_m,unknown:Em,date:Am,enum:$m,literal:xm,nan:Im,template_literal:Tm,file:Nm,success:Rm,custom:Pm,function:Cm,transform:km,map:Om,set:Dm,array:wm,object:zm,union:Ua,intersection:Mm,tuple:jm,record:Um,nullable:Lm,nonoptional:Fm,default:Zm,prefault:Vm,catch:Bm,pipe:Gm,readonly:Wm,promise:Km,optional:La,lazy:Hm};function Fa(e,t){if("_idmap"in e){let o=e,r=Bt({...t,processors:ja}),i={};for(let u of o._idmap.entries()){let[l,m]=u;L(m,r)}let a={},c={registry:o,uri:t?.uri,defs:i};r.external=c;for(let u of o._idmap.entries()){let[l,m]=u;Gt(r,m),a[l]=Wt(r,m)}if(Object.keys(i).length>0){let u=r.target==="draft-2020-12"?"$defs":"definitions";a.__shared={[u]:i}}return{schemas:a}}let n=Bt({...t,processors:ja});return L(e,n),Gt(n,e),Wt(n,e)}var Za=class{get metadataRegistry(){return this.ctx.metadataRegistry}get target(){return this.ctx.target}get unrepresentable(){return this.ctx.unrepresentable}get override(){return this.ctx.override}get io(){return this.ctx.io}get counter(){return this.ctx.counter}set counter(t){this.ctx.counter=t}get seen(){return this.ctx.seen}constructor(t){let n=t?.target??"draft-2020-12";n==="draft-4"&&(n="draft-04"),n==="draft-7"&&(n="draft-07"),this.ctx=Bt({processors:ja,target:n,...t?.metadata&&{metadata:t.metadata},...t?.unrepresentable&&{unrepresentable:t.unrepresentable},...t?.override&&{override:t.override},...t?.io&&{io:t.io}})}process(t,n={path:[],schemaPath:[]}){return L(t,this.ctx,n)}emit(t,n){n&&(n.cycles&&(this.ctx.cycles=n.cycles),n.reused&&(this.ctx.reused=n.reused),n.external&&(this.ctx.external=n.external)),Gt(this.ctx,t);let o=Wt(this.ctx,t),{"~standard":r,...i}=o;return i}};var hy={};var So={};At(So,{ZodAny:()=>yp,ZodArray:()=>Ep,ZodBase64:()=>us,ZodBase64URL:()=>ls,ZodBigInt:()=>mn,ZodBigIntFormat:()=>ps,ZodBoolean:()=>dn,ZodCIDRv4:()=>ss,ZodCIDRv6:()=>cs,ZodCUID:()=>es,ZodCUID2:()=>ts,ZodCatch:()=>Bp,ZodCodec:()=>ko,ZodCustom:()=>Oo,ZodCustomStringFormat:()=>un,ZodDate:()=>To,ZodDefault:()=>jp,ZodDiscriminatedUnion:()=>$p,ZodE164:()=>ds,ZodEmail:()=>Ja,ZodEmoji:()=>qa,ZodEnum:()=>sn,ZodExactOptional:()=>wp,ZodFile:()=>Op,ZodFunction:()=>ef,ZodGUID:()=>Eo,ZodIPv4:()=>is,ZodIPv6:()=>as,ZodIntersection:()=>xp,ZodJWT:()=>ms,ZodKSUID:()=>os,ZodLazy:()=>Jp,ZodLiteral:()=>kp,ZodMAC:()=>dp,ZodMap:()=>Pp,ZodNaN:()=>Wp,ZodNanoID:()=>Qa,ZodNever:()=>Sp,ZodNonOptional:()=>bs,ZodNull:()=>vp,ZodNullable:()=>Mp,ZodNumber:()=>ln,ZodNumberFormat:()=>fr,ZodObject:()=>Ro,ZodOptional:()=>ys,ZodPipe:()=>Co,ZodPrefault:()=>Lp,ZodPreprocess:()=>Kp,ZodPromise:()=>Qp,ZodReadonly:()=>Hp,ZodRecord:()=>an,ZodSet:()=>Cp,ZodString:()=>cn,ZodStringFormat:()=>W,ZodSuccess:()=>Vp,ZodSymbol:()=>fp,ZodTemplateLiteral:()=>Yp,ZodTransform:()=>Dp,ZodTuple:()=>Tp,ZodType:()=>C,ZodULID:()=>rs,ZodURL:()=>Io,ZodUUID:()=>pt,ZodUndefined:()=>gp,ZodUnion:()=>Po,ZodUnknown:()=>bp,ZodVoid:()=>_p,ZodXID:()=>ns,ZodXor:()=>Ap,_ZodString:()=>Ya,_default:()=>Up,_function:()=>Ib,any:()=>nb,array:()=>No,base64:()=>Ly,base64url:()=>Fy,bigint:()=>qy,boolean:()=>pp,catch:()=>Gp,check:()=>Tb,cidrv4:()=>jy,cidrv6:()=>Uy,codec:()=>Eb,cuid:()=>Py,cuid2:()=>Cy,custom:()=>Nb,date:()=>ib,describe:()=>Rb,discriminatedUnion:()=>db,e164:()=>Zy,email:()=>Sy,emoji:()=>Ny,enum:()=>vs,exactOptional:()=>zp,file:()=>yb,float32:()=>Hy,float64:()=>Xy,function:()=>Ib,guid:()=>_y,hash:()=>Ky,hex:()=>Wy,hostname:()=>Gy,httpUrl:()=>Ty,instanceof:()=>Cb,int:()=>Ha,int32:()=>Yy,int64:()=>Qy,intersection:()=>Ip,invertCodec:()=>Ab,ipv4:()=>wy,ipv6:()=>My,json:()=>Ob,jwt:()=>Vy,keyof:()=>ab,ksuid:()=>Dy,lazy:()=>qp,literal:()=>hb,looseObject:()=>ub,looseRecord:()=>pb,mac:()=>zy,map:()=>fb,meta:()=>Pb,nan:()=>_b,nanoid:()=>Ry,nativeEnum:()=>vb,never:()=>fs,nonoptional:()=>Zp,null:()=>hp,nullable:()=>$o,nullish:()=>bb,number:()=>mp,object:()=>sb,optional:()=>Ao,partialRecord:()=>mb,pipe:()=>Xa,prefault:()=>Fp,preprocess:()=>Db,promise:()=>xb,readonly:()=>Xp,record:()=>Rp,refine:()=>tf,set:()=>gb,strictObject:()=>cb,string:()=>_o,stringFormat:()=>By,stringbool:()=>kb,success:()=>Sb,superRefine:()=>rf,symbol:()=>tb,templateLiteral:()=>$b,transform:()=>hs,tuple:()=>Np,uint32:()=>Jy,uint64:()=>eb,ulid:()=>ky,undefined:()=>rb,union:()=>gs,unknown:()=>pr,url:()=>Iy,uuid:()=>Ey,uuidv4:()=>Ay,uuidv6:()=>$y,uuidv7:()=>xy,void:()=>ob,xid:()=>Oy,xor:()=>lb});var Va={};At(Va,{endsWith:()=>Xr,gt:()=>dt,gte:()=>xe,includes:()=>Kr,length:()=>mr,lowercase:()=>Gr,lt:()=>lt,lte:()=>Le,maxLength:()=>dr,maxSize:()=>Vt,mime:()=>Yr,minLength:()=>xt,minSize:()=>mt,multipleOf:()=>Zt,negative:()=>Da,nonnegative:()=>za,nonpositive:()=>wa,normalize:()=>Jr,overwrite:()=>it,positive:()=>Oa,property:()=>Ma,regex:()=>Br,size:()=>lr,slugify:()=>tn,startsWith:()=>Hr,toLowerCase:()=>Qr,toUpperCase:()=>en,trim:()=>qr,uppercase:()=>Wr});var on={};At(on,{ZodISODate:()=>Ga,ZodISODateTime:()=>Ba,ZodISODuration:()=>Ka,ZodISOTime:()=>Wa,date:()=>Ym,datetime:()=>Xm,duration:()=>qm,time:()=>Jm});var Ba=f("ZodISODateTime",(e,t)=>{Il.init(e,t),W.init(e,t)});function Xm(e){return Pd(Ba,e)}var Ga=f("ZodISODate",(e,t)=>{Tl.init(e,t),W.init(e,t)});function Ym(e){return Cd(Ga,e)}var Wa=f("ZodISOTime",(e,t)=>{Nl.init(e,t),W.init(e,t)});function Jm(e){return kd(Wa,e)}var Ka=f("ZodISODuration",(e,t)=>{Rl.init(e,t),W.init(e,t)});function qm(e){return Od(Ka,e)}var yy=(e,t)=>{ao.init(e,t),e.name="ZodError",Object.defineProperties(e,{format:{value:n=>co(e,n)},flatten:{value:n=>so(e,n)},addIssue:{value:n=>{e.issues.push(n),e.message=JSON.stringify(e.issues,wr,2)}},addIssues:{value:n=>{e.issues.push(...n),e.message=JSON.stringify(e.issues,wr,2)}},isEmpty:{get(){return e.issues.length===0}}})},GN=f("ZodError",yy),De=f("ZodError",yy,{Parent:Error});var Qm=jr(De),ep=Ur(De),tp=Lr(De),rp=Fr(De),np=Fi(De),op=Zi(De),ip=Vi(De),ap=Bi(De),sp=Gi(De),cp=Wi(De),up=Ki(De),lp=Hi(De);var by=new WeakMap;function xo(e,t,n){let o=Object.getPrototypeOf(e),r=by.get(o);if(r||(r=new Set,by.set(o,r)),!r.has(t)){r.add(t);for(let i in n){let a=n[i];Object.defineProperty(o,i,{configurable:!0,enumerable:!1,get(){let c=a.bind(this);return Object.defineProperty(this,i,{configurable:!0,writable:!0,enumerable:!0,value:c}),c},set(c){Object.defineProperty(this,i,{configurable:!0,writable:!0,enumerable:!0,value:c})}})}}}var C=f("ZodType",(e,t)=>(P.init(e,t),Object.assign(e["~standard"],{jsonSchema:{input:nn(e,"input"),output:nn(e,"output")}}),e.toJSONSchema=dm(e,{}),e.def=t,e.type=t.type,Object.defineProperty(e,"_def",{value:t}),e.parse=(n,o)=>Qm(e,n,o,{callee:e.parse}),e.safeParse=(n,o)=>tp(e,n,o),e.parseAsync=async(n,o)=>ep(e,n,o,{callee:e.parseAsync}),e.safeParseAsync=async(n,o)=>rp(e,n,o),e.spa=e.safeParseAsync,e.encode=(n,o)=>np(e,n,o),e.decode=(n,o)=>op(e,n,o),e.encodeAsync=async(n,o)=>ip(e,n,o),e.decodeAsync=async(n,o)=>ap(e,n,o),e.safeEncode=(n,o)=>sp(e,n,o),e.safeDecode=(n,o)=>cp(e,n,o),e.safeEncodeAsync=async(n,o)=>up(e,n,o),e.safeDecodeAsync=async(n,o)=>lp(e,n,o),xo(e,"ZodType",{check(...n){let o=this.def;return this.clone(_.mergeDefs(o,{checks:[...o.checks??[],...n.map(r=>typeof r=="function"?{_zod:{check:r,def:{check:"custom"},onattach:[]}}:r)]}),{parent:!0})},with(...n){return this.check(...n)},clone(n,o){return Ae(this,n,o)},brand(){return this},register(n,o){return n.add(this,o),this},refine(n,o){return this.check(tf(n,o))},superRefine(n,o){return this.check(rf(n,o))},overwrite(n){return this.check(it(n))},optional(){return Ao(this)},exactOptional(){return zp(this)},nullable(){return $o(this)},nullish(){return Ao($o(this))},nonoptional(n){return Zp(this,n)},array(){return No(this)},or(n){return gs([this,n])},and(n){return Ip(this,n)},transform(n){return Xa(this,hs(n))},default(n){return Up(this,n)},prefault(n){return Fp(this,n)},catch(n){return Gp(this,n)},pipe(n){return Xa(this,n)},readonly(){return Xp(this)},describe(n){let o=this.clone();return pe.add(o,{description:n}),o},meta(...n){if(n.length===0)return pe.get(this);let o=this.clone();return pe.add(o,n[0]),o},isOptional(){return this.safeParse(void 0).success},isNullable(){return this.safeParse(null).success},apply(n){return n(this)}}),Object.defineProperty(e,"description",{get(){return pe.get(e)?.description},configurable:!0}),e)),Ya=f("_ZodString",(e,t)=>{ur.init(e,t),C.init(e,t),e._zod.processJSONSchema=(o,r,i)=>mm(e,o,r,i);let n=e._zod.bag;e.format=n.format??null,e.minLength=n.minimum??null,e.maxLength=n.maximum??null,xo(e,"_ZodString",{regex(...o){return this.check(Br(...o))},includes(...o){return this.check(Kr(...o))},startsWith(...o){return this.check(Hr(...o))},endsWith(...o){return this.check(Xr(...o))},min(...o){return this.check(xt(...o))},max(...o){return this.check(dr(...o))},length(...o){return this.check(mr(...o))},nonempty(...o){return this.check(xt(1,...o))},lowercase(o){return this.check(Gr(o))},uppercase(o){return this.check(Wr(o))},trim(){return this.check(qr())},normalize(...o){return this.check(Jr(...o))},toLowerCase(){return this.check(Qr())},toUpperCase(){return this.check(en())},slugify(){return this.check(tn())}})}),cn=f("ZodString",(e,t)=>{ur.init(e,t),Ya.init(e,t),e.email=n=>e.check(pa(Ja,n)),e.url=n=>e.check(bo(Io,n)),e.jwt=n=>e.check(ka(ms,n)),e.emoji=n=>e.check(ya(qa,n)),e.guid=n=>e.check(yo(Eo,n)),e.uuid=n=>e.check(fa(pt,n)),e.uuidv4=n=>e.check(ga(pt,n)),e.uuidv6=n=>e.check(va(pt,n)),e.uuidv7=n=>e.check(ha(pt,n)),e.nanoid=n=>e.check(ba(Qa,n)),e.guid=n=>e.check(yo(Eo,n)),e.cuid=n=>e.check(Sa(es,n)),e.cuid2=n=>e.check(_a(ts,n)),e.ulid=n=>e.check(Ea(rs,n)),e.base64=n=>e.check(Ra(us,n)),e.base64url=n=>e.check(Pa(ls,n)),e.xid=n=>e.check(Aa(ns,n)),e.ksuid=n=>e.check($a(os,n)),e.ipv4=n=>e.check(xa(is,n)),e.ipv6=n=>e.check(Ia(as,n)),e.cidrv4=n=>e.check(Ta(ss,n)),e.cidrv6=n=>e.check(Na(cs,n)),e.e164=n=>e.check(Ca(ds,n)),e.datetime=n=>e.check(Xm(n)),e.date=n=>e.check(Ym(n)),e.time=n=>e.check(Jm(n)),e.duration=n=>e.check(qm(n))});function _o(e){return Id(cn,e)}var W=f("ZodStringFormat",(e,t)=>{G.init(e,t),Ya.init(e,t)}),Ja=f("ZodEmail",(e,t)=>{hl.init(e,t),W.init(e,t)});function Sy(e){return pa(Ja,e)}var Eo=f("ZodGUID",(e,t)=>{gl.init(e,t),W.init(e,t)});function _y(e){return yo(Eo,e)}var pt=f("ZodUUID",(e,t)=>{vl.init(e,t),W.init(e,t)});function Ey(e){return fa(pt,e)}function Ay(e){return ga(pt,e)}function $y(e){return va(pt,e)}function xy(e){return ha(pt,e)}var Io=f("ZodURL",(e,t)=>{yl.init(e,t),W.init(e,t)});function Iy(e){return bo(Io,e)}function Ty(e){return bo(Io,{protocol:Ue.httpProtocol,hostname:Ue.domain,..._.normalizeParams(e)})}var qa=f("ZodEmoji",(e,t)=>{bl.init(e,t),W.init(e,t)});function Ny(e){return ya(qa,e)}var Qa=f("ZodNanoID",(e,t)=>{Sl.init(e,t),W.init(e,t)});function Ry(e){return ba(Qa,e)}var es=f("ZodCUID",(e,t)=>{_l.init(e,t),W.init(e,t)});function Py(e){return Sa(es,e)}var ts=f("ZodCUID2",(e,t)=>{El.init(e,t),W.init(e,t)});function Cy(e){return _a(ts,e)}var rs=f("ZodULID",(e,t)=>{Al.init(e,t),W.init(e,t)});function ky(e){return Ea(rs,e)}var ns=f("ZodXID",(e,t)=>{$l.init(e,t),W.init(e,t)});function Oy(e){return Aa(ns,e)}var os=f("ZodKSUID",(e,t)=>{xl.init(e,t),W.init(e,t)});function Dy(e){return $a(os,e)}var is=f("ZodIPv4",(e,t)=>{Pl.init(e,t),W.init(e,t)});function wy(e){return xa(is,e)}var dp=f("ZodMAC",(e,t)=>{kl.init(e,t),W.init(e,t)});function zy(e){return Nd(dp,e)}var as=f("ZodIPv6",(e,t)=>{Cl.init(e,t),W.init(e,t)});function My(e){return Ia(as,e)}var ss=f("ZodCIDRv4",(e,t)=>{Ol.init(e,t),W.init(e,t)});function jy(e){return Ta(ss,e)}var cs=f("ZodCIDRv6",(e,t)=>{Dl.init(e,t),W.init(e,t)});function Uy(e){return Na(cs,e)}var us=f("ZodBase64",(e,t)=>{zl.init(e,t),W.init(e,t)});function Ly(e){return Ra(us,e)}var ls=f("ZodBase64URL",(e,t)=>{Ml.init(e,t),W.init(e,t)});function Fy(e){return Pa(ls,e)}var ds=f("ZodE164",(e,t)=>{jl.init(e,t),W.init(e,t)});function Zy(e){return Ca(ds,e)}var ms=f("ZodJWT",(e,t)=>{Ul.init(e,t),W.init(e,t)});function Vy(e){return ka(ms,e)}var un=f("ZodCustomStringFormat",(e,t)=>{Ll.init(e,t),W.init(e,t)});function By(e,t,n={}){return rn(un,e,t,n)}function Gy(e){return rn(un,"hostname",Ue.hostname,e)}function Wy(e){return rn(un,"hex",Ue.hex,e)}function Ky(e,t){let n=t?.enc??"hex",o=`${e}_${n}`,r=Ue[o];if(!r)throw new Error(`Unrecognized hash format: ${o}`);return rn(un,o,r,t)}var ln=f("ZodNumber",(e,t)=>{na.init(e,t),C.init(e,t),e._zod.processJSONSchema=(o,r,i)=>pm(e,o,r,i),xo(e,"ZodNumber",{gt(o,r){return this.check(dt(o,r))},gte(o,r){return this.check(xe(o,r))},min(o,r){return this.check(xe(o,r))},lt(o,r){return this.check(lt(o,r))},lte(o,r){return this.check(Le(o,r))},max(o,r){return this.check(Le(o,r))},int(o){return this.check(Ha(o))},safe(o){return this.check(Ha(o))},positive(o){return this.check(dt(0,o))},nonnegative(o){return this.check(xe(0,o))},negative(o){return this.check(lt(0,o))},nonpositive(o){return this.check(Le(0,o))},multipleOf(o,r){return this.check(Zt(o,r))},step(o,r){return this.check(Zt(o,r))},finite(){return this}});let n=e._zod.bag;e.minValue=Math.max(n.minimum??Number.NEGATIVE_INFINITY,n.exclusiveMinimum??Number.NEGATIVE_INFINITY)??null,e.maxValue=Math.min(n.maximum??Number.POSITIVE_INFINITY,n.exclusiveMaximum??Number.POSITIVE_INFINITY)??null,e.isInt=(n.format??"").includes("int")||Number.isSafeInteger(n.multipleOf??.5),e.isFinite=!0,e.format=n.format??null});function mp(e){return Dd(ln,e)}var fr=f("ZodNumberFormat",(e,t)=>{Fl.init(e,t),ln.init(e,t)});function Ha(e){return zd(fr,e)}function Hy(e){return Md(fr,e)}function Xy(e){return jd(fr,e)}function Yy(e){return Ud(fr,e)}function Jy(e){return Ld(fr,e)}var dn=f("ZodBoolean",(e,t)=>{po.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>fm(e,n,o,r)});function pp(e){return Fd(dn,e)}var mn=f("ZodBigInt",(e,t)=>{oa.init(e,t),C.init(e,t),e._zod.processJSONSchema=(o,r,i)=>gm(e,o,r,i),e.gte=(o,r)=>e.check(xe(o,r)),e.min=(o,r)=>e.check(xe(o,r)),e.gt=(o,r)=>e.check(dt(o,r)),e.gte=(o,r)=>e.check(xe(o,r)),e.min=(o,r)=>e.check(xe(o,r)),e.lt=(o,r)=>e.check(lt(o,r)),e.lte=(o,r)=>e.check(Le(o,r)),e.max=(o,r)=>e.check(Le(o,r)),e.positive=o=>e.check(dt(BigInt(0),o)),e.negative=o=>e.check(lt(BigInt(0),o)),e.nonpositive=o=>e.check(Le(BigInt(0),o)),e.nonnegative=o=>e.check(xe(BigInt(0),o)),e.multipleOf=(o,r)=>e.check(Zt(o,r));let n=e._zod.bag;e.minValue=n.minimum??null,e.maxValue=n.maximum??null,e.format=n.format??null});function qy(e){return Vd(mn,e)}var ps=f("ZodBigIntFormat",(e,t)=>{Zl.init(e,t),mn.init(e,t)});function Qy(e){return Gd(ps,e)}function eb(e){return Wd(ps,e)}var fp=f("ZodSymbol",(e,t)=>{Vl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>vm(e,n,o,r)});function tb(e){return Kd(fp,e)}var gp=f("ZodUndefined",(e,t)=>{Bl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>ym(e,n,o,r)});function rb(e){return Hd(gp,e)}var vp=f("ZodNull",(e,t)=>{Gl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>hm(e,n,o,r)});function hp(e){return Xd(vp,e)}var yp=f("ZodAny",(e,t)=>{Wl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>_m(e,n,o,r)});function nb(){return Yd(yp)}var bp=f("ZodUnknown",(e,t)=>{Kl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Em(e,n,o,r)});function pr(){return Jd(bp)}var Sp=f("ZodNever",(e,t)=>{Hl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Sm(e,n,o,r)});function fs(e){return qd(Sp,e)}var _p=f("ZodVoid",(e,t)=>{Xl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>bm(e,n,o,r)});function ob(e){return Qd(_p,e)}var To=f("ZodDate",(e,t)=>{Yl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(o,r,i)=>Am(e,o,r,i),e.min=(o,r)=>e.check(xe(o,r)),e.max=(o,r)=>e.check(Le(o,r));let n=e._zod.bag;e.minDate=n.minimum?new Date(n.minimum):null,e.maxDate=n.maximum?new Date(n.maximum):null});function ib(e){return em(To,e)}var Ep=f("ZodArray",(e,t)=>{Jl.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>wm(e,n,o,r),e.element=t.element,xo(e,"ZodArray",{min(n,o){return this.check(xt(n,o))},nonempty(n){return this.check(xt(1,n))},max(n,o){return this.check(dr(n,o))},length(n,o){return this.check(mr(n,o))},unwrap(){return this.element}})});function No(e,t){return nm(Ep,e,t)}function ab(e){let t=e._zod.def.shape;return vs(Object.keys(t))}var Ro=f("ZodObject",(e,t)=>{ql.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>zm(e,n,o,r),_.defineLazy(e,"shape",()=>t.shape),xo(e,"ZodObject",{keyof(){return vs(Object.keys(this._zod.def.shape))},catchall(n){return this.clone({...this._zod.def,catchall:n})},passthrough(){return this.clone({...this._zod.def,catchall:pr()})},loose(){return this.clone({...this._zod.def,catchall:pr()})},strict(){return this.clone({...this._zod.def,catchall:fs()})},strip(){return this.clone({...this._zod.def,catchall:void 0})},extend(n){return _.extend(this,n)},safeExtend(n){return _.safeExtend(this,n)},merge(n){return _.merge(this,n)},pick(n){return _.pick(this,n)},omit(n){return _.omit(this,n)},partial(...n){return _.partial(ys,this,n[0])},required(...n){return _.required(bs,this,n[0])}})});function sb(e,t){let n={type:"object",shape:e??{},..._.normalizeParams(t)};return new Ro(n)}function cb(e,t){return new Ro({type:"object",shape:e,catchall:fs(),..._.normalizeParams(t)})}function ub(e,t){return new Ro({type:"object",shape:e,catchall:pr(),..._.normalizeParams(t)})}var Po=f("ZodUnion",(e,t)=>{fo.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ua(e,n,o,r),e.options=t.options});function gs(e,t){return new Po({type:"union",options:e,..._.normalizeParams(t)})}var Ap=f("ZodXor",(e,t)=>{Po.init(e,t),Ql.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Ua(e,n,o,r),e.options=t.options});function lb(e,t){return new Ap({type:"union",options:e,inclusive:!1,..._.normalizeParams(t)})}var $p=f("ZodDiscriminatedUnion",(e,t)=>{Po.init(e,t),ed.init(e,t)});function db(e,t,n){return new $p({type:"union",options:t,discriminator:e,..._.normalizeParams(n)})}var xp=f("ZodIntersection",(e,t)=>{td.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Mm(e,n,o,r)});function Ip(e,t){return new xp({type:"intersection",left:e,right:t})}var Tp=f("ZodTuple",(e,t)=>{ia.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>jm(e,n,o,r),e.rest=n=>e.clone({...e._zod.def,rest:n})});function Np(e,t,n){let o=t instanceof P,r=o?n:t,i=o?t:null;return new Tp({type:"tuple",items:e,rest:i,..._.normalizeParams(r)})}var an=f("ZodRecord",(e,t)=>{rd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Um(e,n,o,r),e.keyType=t.keyType,e.valueType=t.valueType});function Rp(e,t,n){return!t||!t._zod?new an({type:"record",keyType:_o(),valueType:e,..._.normalizeParams(t)}):new an({type:"record",keyType:e,valueType:t,..._.normalizeParams(n)})}function mb(e,t,n){let o=Ae(e);return o._zod.values=void 0,new an({type:"record",keyType:o,valueType:t,..._.normalizeParams(n)})}function pb(e,t,n){return new an({type:"record",keyType:e,valueType:t,mode:"loose",..._.normalizeParams(n)})}var Pp=f("ZodMap",(e,t)=>{nd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Om(e,n,o,r),e.keyType=t.keyType,e.valueType=t.valueType,e.min=(...n)=>e.check(mt(...n)),e.nonempty=n=>e.check(mt(1,n)),e.max=(...n)=>e.check(Vt(...n)),e.size=(...n)=>e.check(lr(...n))});function fb(e,t,n){return new Pp({type:"map",keyType:e,valueType:t,..._.normalizeParams(n)})}var Cp=f("ZodSet",(e,t)=>{od.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Dm(e,n,o,r),e.min=(...n)=>e.check(mt(...n)),e.nonempty=n=>e.check(mt(1,n)),e.max=(...n)=>e.check(Vt(...n)),e.size=(...n)=>e.check(lr(...n))});function gb(e,t){return new Cp({type:"set",valueType:e,..._.normalizeParams(t)})}var sn=f("ZodEnum",(e,t)=>{id.init(e,t),C.init(e,t),e._zod.processJSONSchema=(o,r,i)=>$m(e,o,r,i),e.enum=t.entries,e.options=Object.values(t.entries);let n=new Set(Object.keys(t.entries));e.extract=(o,r)=>{let i={};for(let a of o)if(n.has(a))i[a]=t.entries[a];else throw new Error(`Key ${a} not found in enum`);return new sn({...t,checks:[],..._.normalizeParams(r),entries:i})},e.exclude=(o,r)=>{let i={...t.entries};for(let a of o)if(n.has(a))delete i[a];else throw new Error(`Key ${a} not found in enum`);return new sn({...t,checks:[],..._.normalizeParams(r),entries:i})}});function vs(e,t){let n=Array.isArray(e)?Object.fromEntries(e.map(o=>[o,o])):e;return new sn({type:"enum",entries:n,..._.normalizeParams(t)})}function vb(e,t){return new sn({type:"enum",entries:e,..._.normalizeParams(t)})}var kp=f("ZodLiteral",(e,t)=>{ad.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>xm(e,n,o,r),e.values=new Set(t.values),Object.defineProperty(e,"value",{get(){if(t.values.length>1)throw new Error("This schema contains multiple valid literal values. Use `.values` instead.");return t.values[0]}})});function hb(e,t){return new kp({type:"literal",values:Array.isArray(e)?e:[e],..._.normalizeParams(t)})}var Op=f("ZodFile",(e,t)=>{sd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Nm(e,n,o,r),e.min=(n,o)=>e.check(mt(n,o)),e.max=(n,o)=>e.check(Vt(n,o)),e.mime=(n,o)=>e.check(Yr(Array.isArray(n)?n:[n],o))});function yb(e){return om(Op,e)}var Dp=f("ZodTransform",(e,t)=>{cd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>km(e,n,o,r),e._zod.parse=(n,o)=>{if(o.direction==="backward")throw new Mt(e.constructor.name);n.addIssue=i=>{if(typeof i=="string")n.issues.push(_.issue(i,n.value,t));else{let a=i;a.fatal&&(a.continue=!1),a.code??(a.code="custom"),a.input??(a.input=n.value),a.inst??(a.inst=e),n.issues.push(_.issue(a))}};let r=t.transform(n.value,n);return r instanceof Promise?r.then(i=>(n.value=i,n.fallback=!0,n)):(n.value=r,n.fallback=!0,n)}});function hs(e){return new Dp({type:"transform",transform:e})}var ys=f("ZodOptional",(e,t)=>{aa.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>La(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Ao(e){return new ys({type:"optional",innerType:e})}var wp=f("ZodExactOptional",(e,t)=>{ud.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>La(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function zp(e){return new wp({type:"optional",innerType:e})}var Mp=f("ZodNullable",(e,t)=>{ld.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Lm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function $o(e){return new Mp({type:"nullable",innerType:e})}function bb(e){return Ao($o(e))}var jp=f("ZodDefault",(e,t)=>{dd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Zm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType,e.removeDefault=e.unwrap});function Up(e,t){return new jp({type:"default",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var Lp=f("ZodPrefault",(e,t)=>{md.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Vm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Fp(e,t){return new Lp({type:"prefault",innerType:e,get defaultValue(){return typeof t=="function"?t():_.shallowClone(t)}})}var bs=f("ZodNonOptional",(e,t)=>{pd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Fm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Zp(e,t){return new bs({type:"nonoptional",innerType:e,..._.normalizeParams(t)})}var Vp=f("ZodSuccess",(e,t)=>{fd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Rm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Sb(e){return new Vp({type:"success",innerType:e})}var Bp=f("ZodCatch",(e,t)=>{gd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Bm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType,e.removeCatch=e.unwrap});function Gp(e,t){return new Bp({type:"catch",innerType:e,catchValue:typeof t=="function"?t:()=>t})}var Wp=f("ZodNaN",(e,t)=>{vd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Im(e,n,o,r)});function _b(e){return rm(Wp,e)}var Co=f("ZodPipe",(e,t)=>{sa.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Gm(e,n,o,r),e.in=t.in,e.out=t.out});function Xa(e,t){return new Co({type:"pipe",in:e,out:t})}var ko=f("ZodCodec",(e,t)=>{Co.init(e,t),go.init(e,t)});function Eb(e,t,n){return new ko({type:"pipe",in:e,out:t,transform:n.decode,reverseTransform:n.encode})}function Ab(e){let t=e._zod.def;return new ko({type:"pipe",in:t.out,out:t.in,transform:t.reverseTransform,reverseTransform:t.transform})}var Kp=f("ZodPreprocess",(e,t)=>{Co.init(e,t),hd.init(e,t)}),Hp=f("ZodReadonly",(e,t)=>{yd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Wm(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function Xp(e){return new Hp({type:"readonly",innerType:e})}var Yp=f("ZodTemplateLiteral",(e,t)=>{bd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Tm(e,n,o,r)});function $b(e,t){return new Yp({type:"template_literal",parts:e,..._.normalizeParams(t)})}var Jp=f("ZodLazy",(e,t)=>{Ed.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Hm(e,n,o,r),e.unwrap=()=>e._zod.def.getter()});function qp(e){return new Jp({type:"lazy",getter:e})}var Qp=f("ZodPromise",(e,t)=>{_d.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Km(e,n,o,r),e.unwrap=()=>e._zod.def.innerType});function xb(e){return new Qp({type:"promise",innerType:e})}var ef=f("ZodFunction",(e,t)=>{Sd.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Cm(e,n,o,r)});function Ib(e){return new ef({type:"function",input:Array.isArray(e?.input)?Np(e?.input):e?.input??No(pr()),output:e?.output??pr()})}var Oo=f("ZodCustom",(e,t)=>{Ad.init(e,t),C.init(e,t),e._zod.processJSONSchema=(n,o,r)=>Pm(e,n,o,r)});function Tb(e){let t=new X({check:"custom"});return t._zod.check=e,t}function Nb(e,t){return im(Oo,e??(()=>!0),t)}function tf(e,t={}){return am(Oo,e,t)}function rf(e,t){return sm(e,t)}var Rb=cm,Pb=um;function Cb(e,t={}){let n=new Oo({type:"custom",check:"custom",fn:o=>o instanceof e,abort:!0,..._.normalizeParams(t)});return n._zod.bag.Class=e,n._zod.check=o=>{o.value instanceof e||o.issues.push({code:"invalid_type",expected:e.name,input:o.value,inst:n,path:[...n._zod.def.path??[]]})},n}var kb=(...e)=>lm({Codec:ko,Boolean:dn,String:cn},...e);function Ob(e){let t=qp(()=>gs([_o(e),mp(),pp(),hp(),No(t),Rp(_o(),t)]));return t}function Db(e,t){return new Kp({type:"pipe",in:hs(e),out:t})}var KN={invalid_type:"invalid_type",too_big:"too_big",too_small:"too_small",invalid_format:"invalid_format",not_multiple_of:"not_multiple_of",unrecognized_keys:"unrecognized_keys",invalid_union:"invalid_union",invalid_key:"invalid_key",invalid_element:"invalid_element",invalid_value:"invalid_value",custom:"custom"};function HN(e){ee({customError:e})}function XN(){return ee().customError}var nf;nf||(nf={});var A={...So,...Va,iso:on},YN=new Set(["$schema","$ref","$defs","definitions","$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor","type","enum","const","anyOf","oneOf","allOf","not","properties","required","additionalProperties","patternProperties","propertyNames","minProperties","maxProperties","items","prefixItems","additionalItems","minItems","maxItems","uniqueItems","contains","minContains","maxContains","minLength","maxLength","pattern","format","minimum","maximum","exclusiveMinimum","exclusiveMaximum","multipleOf","description","default","contentEncoding","contentMediaType","contentSchema","unevaluatedItems","unevaluatedProperties","if","then","else","dependentSchemas","dependentRequired","nullable","readOnly"]);function JN(e,t){let n=e.$schema;return n==="https://json-schema.org/draft/2020-12/schema"?"draft-2020-12":n==="http://json-schema.org/draft-07/schema#"?"draft-7":n==="http://json-schema.org/draft-04/schema#"?"draft-4":t??"draft-2020-12"}function qN(e,t){if(!e.startsWith("#"))throw new Error("External $ref is not supported, only local refs (#/...) are allowed");let n=e.slice(1).split("/").filter(Boolean);if(n.length===0)return t.rootSchema;let o=t.version==="draft-2020-12"?"$defs":"definitions";if(n[0]===o){let r=n[1];if(!r||!t.defs[r])throw new Error(`Reference not found: ${e}`);return t.defs[r]}throw new Error(`Reference not found: ${e}`)}function wb(e,t){if(e.not!==void 0){if(typeof e.not=="object"&&Object.keys(e.not).length===0)return A.never();throw new Error("not is not supported in Zod (except { not: {} } for never)")}if(e.unevaluatedItems!==void 0)throw new Error("unevaluatedItems is not supported");if(e.unevaluatedProperties!==void 0)throw new Error("unevaluatedProperties is not supported");if(e.if!==void 0||e.then!==void 0||e.else!==void 0)throw new Error("Conditional schemas (if/then/else) are not supported");if(e.dependentSchemas!==void 0||e.dependentRequired!==void 0)throw new Error("dependentSchemas and dependentRequired are not supported");if(e.$ref){let r=e.$ref;if(t.refs.has(r))return t.refs.get(r);if(t.processing.has(r))return A.lazy(()=>{if(!t.refs.has(r))throw new Error(`Circular reference not resolved: ${r}`);return t.refs.get(r)});t.processing.add(r);let i=qN(r,t),a=ye(i,t);return t.refs.set(r,a),t.processing.delete(r),a}if(e.enum!==void 0){let r=e.enum;if(t.version==="openapi-3.0"&&e.nullable===!0&&r.length===1&&r[0]===null)return A.null();if(r.length===0)return A.never();if(r.length===1)return A.literal(r[0]);if(r.every(a=>typeof a=="string"))return A.enum(r);let i=r.map(a=>A.literal(a));return i.length<2?i[0]:A.union([i[0],i[1],...i.slice(2)])}if(e.const!==void 0)return A.literal(e.const);let n=e.type;if(Array.isArray(n)){let r=n.map(i=>{let a={...e,type:i};return wb(a,t)});return r.length===0?A.never():r.length===1?r[0]:A.union(r)}if(!n)return A.any();let o;switch(n){case"string":{let r=A.string();if(e.format){let i=e.format;i==="email"?r=r.check(A.email()):i==="uri"||i==="uri-reference"?r=r.check(A.url()):i==="uuid"||i==="guid"?r=r.check(A.uuid()):i==="date-time"?r=r.check(A.iso.datetime()):i==="date"?r=r.check(A.iso.date()):i==="time"?r=r.check(A.iso.time()):i==="duration"?r=r.check(A.iso.duration()):i==="ipv4"?r=r.check(A.ipv4()):i==="ipv6"?r=r.check(A.ipv6()):i==="mac"?r=r.check(A.mac()):i==="cidr"?r=r.check(A.cidrv4()):i==="cidr-v6"?r=r.check(A.cidrv6()):i==="base64"?r=r.check(A.base64()):i==="base64url"?r=r.check(A.base64url()):i==="e164"?r=r.check(A.e164()):i==="jwt"?r=r.check(A.jwt()):i==="emoji"?r=r.check(A.emoji()):i==="nanoid"?r=r.check(A.nanoid()):i==="cuid"?r=r.check(A.cuid()):i==="cuid2"?r=r.check(A.cuid2()):i==="ulid"?r=r.check(A.ulid()):i==="xid"?r=r.check(A.xid()):i==="ksuid"&&(r=r.check(A.ksuid()))}typeof e.minLength=="number"&&(r=r.min(e.minLength)),typeof e.maxLength=="number"&&(r=r.max(e.maxLength)),e.pattern&&(r=r.regex(new RegExp(e.pattern))),o=r;break}case"number":case"integer":{let r=n==="integer"?A.number().int():A.number();typeof e.minimum=="number"&&(r=r.min(e.minimum)),typeof e.maximum=="number"&&(r=r.max(e.maximum)),typeof e.exclusiveMinimum=="number"?r=r.gt(e.exclusiveMinimum):e.exclusiveMinimum===!0&&typeof e.minimum=="number"&&(r=r.gt(e.minimum)),typeof e.exclusiveMaximum=="number"?r=r.lt(e.exclusiveMaximum):e.exclusiveMaximum===!0&&typeof e.maximum=="number"&&(r=r.lt(e.maximum)),typeof e.multipleOf=="number"&&(r=r.multipleOf(e.multipleOf)),o=r;break}case"boolean":{o=A.boolean();break}case"null":{o=A.null();break}case"object":{let r={},i=e.properties||{},a=new Set(e.required||[]);for(let[u,l]of Object.entries(i)){let m=ye(l,t);r[u]=a.has(u)?m:m.optional()}if(e.propertyNames){let u=ye(e.propertyNames,t),l=e.additionalProperties&&typeof e.additionalProperties=="object"?ye(e.additionalProperties,t):A.any();if(Object.keys(r).length===0){o=A.record(u,l);break}let m=A.object(r).passthrough(),p=A.looseRecord(u,l);o=A.intersection(m,p);break}if(e.patternProperties){let u=e.patternProperties,l=Object.keys(u),m=[];for(let g of l){let h=ye(u[g],t),$=A.string().regex(new RegExp(g));m.push(A.looseRecord($,h))}let p=[];if(Object.keys(r).length>0&&p.push(A.object(r).passthrough()),p.push(...m),p.length===0)o=A.object({}).passthrough();else if(p.length===1)o=p[0];else{let g=A.intersection(p[0],p[1]);for(let h=2;h<p.length;h++)g=A.intersection(g,p[h]);o=g}break}let c=A.object(r);e.additionalProperties===!1?o=c.strict():typeof e.additionalProperties=="object"?o=c.catchall(ye(e.additionalProperties,t)):o=c.passthrough();break}case"array":{let r=e.prefixItems,i=e.items;if(r&&Array.isArray(r)){let a=r.map(u=>ye(u,t)),c=i&&typeof i=="object"&&!Array.isArray(i)?ye(i,t):void 0;c?o=A.tuple(a).rest(c):o=A.tuple(a),typeof e.minItems=="number"&&(o=o.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(o=o.check(A.maxLength(e.maxItems)))}else if(Array.isArray(i)){let a=i.map(u=>ye(u,t)),c=e.additionalItems&&typeof e.additionalItems=="object"?ye(e.additionalItems,t):void 0;c?o=A.tuple(a).rest(c):o=A.tuple(a),typeof e.minItems=="number"&&(o=o.check(A.minLength(e.minItems))),typeof e.maxItems=="number"&&(o=o.check(A.maxLength(e.maxItems)))}else if(i!==void 0){let a=ye(i,t),c=A.array(a);typeof e.minItems=="number"&&(c=c.min(e.minItems)),typeof e.maxItems=="number"&&(c=c.max(e.maxItems)),o=c}else o=A.array(A.any());break}default:throw new Error(`Unsupported type: ${n}`)}return o}function ye(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n=wb(e,t),o=e.type||e.enum!==void 0||e.const!==void 0;if(e.anyOf&&Array.isArray(e.anyOf)){let c=e.anyOf.map(l=>ye(l,t)),u=A.union(c);n=o?A.intersection(n,u):u}if(e.oneOf&&Array.isArray(e.oneOf)){let c=e.oneOf.map(l=>ye(l,t)),u=A.xor(c);n=o?A.intersection(n,u):u}if(e.allOf&&Array.isArray(e.allOf))if(e.allOf.length===0)n=o?n:A.any();else{let c=o?n:ye(e.allOf[0],t),u=o?0:1;for(let l=u;l<e.allOf.length;l++)c=A.intersection(c,ye(e.allOf[l],t));n=c}e.nullable===!0&&t.version==="openapi-3.0"&&(n=A.nullable(n)),e.readOnly===!0&&(n=A.readonly(n)),e.default!==void 0&&(n=n.default(e.default));let r={},i=["$id","id","$comment","$anchor","$vocabulary","$dynamicRef","$dynamicAnchor"];for(let c of i)c in e&&(r[c]=e[c]);let a=["contentEncoding","contentMediaType","contentSchema"];for(let c of a)c in e&&(r[c]=e[c]);for(let c of Object.keys(e))YN.has(c)||(r[c]=e[c]);return Object.keys(r).length>0&&t.registry.add(n,r),e.description&&(n=n.describe(e.description)),n}function zb(e,t){if(typeof e=="boolean")return e?A.any():A.never();let n;try{n=JSON.parse(JSON.stringify(e))}catch{throw new Error("fromJSONSchema input is not valid JSON (possibly cyclic); use $defs/$ref for recursive schemas")}let o=JN(n,t?.defaultTarget),r=n.$defs||n.definitions||{},i={version:o,defs:r,refs:new Map,processing:new Set,rootSchema:n,registry:t?.registry??pe};return ye(n,i)}var of={};At(of,{bigint:()=>rR,boolean:()=>tR,date:()=>nR,number:()=>eR,string:()=>QN});function QN(e){return Td(cn,e)}function eR(e){return wd(ln,e)}function tR(e){return Zd(dn,e)}function rR(e){return Bd(mn,e)}function nR(e){return tm(To,e)}ee(ca());var oR=Object.defineProperty,Mb=(e,t)=>oR(e,"name",{value:t,configurable:!0});function af(e){let t=e.replace(/\./g,"-");return{hostedZoneId:`${t}-hosted-zone-id`,certificateArn:`${t}-certificate-arn`,usEast1CertificateArn:`${t}-us-east-1-certificate-arn`,delegationRoleArn:`${t}-delegation-role-arn`,nameservers:`${t}-nameservers`}}Mb(af,"getDomainExportNames");function jb(e){return typeof e.hostedZoneId=="string"}Mb(jb,"isManagedDomainBinding");var iR=Object.defineProperty,Kt=(e,t)=>iR(e,"name",{value:t,configurable:!0});function Te(e){return e.replace(/[-_](.)/g,(t,n)=>n.toUpperCase()).replace(/^./,t=>t.toUpperCase())}Kt(Te,"toPascalCase");function at(e){return e.replace(/([A-Z]+)([A-Z][a-z])/g,"$1-$2").replace(/([a-z\d])([A-Z])/g,"$1-$2").replace(/[\s_]+/g,"-").toLowerCase()}Kt(at,"toKebab");function pn(e){return at(e).replace(/-/g,"_")}Kt(pn,"toValidDatabaseName");function Ub(e){return at(e).replace(/-/g,"_").toUpperCase()}Kt(Ub,"toScreamingSnake");function sf(e){return e.length===0?e:e.charAt(0).toUpperCase()+e.slice(1)}Kt(sf,"capitalise");function Lb(e){return e.split(".").join("")}Kt(Lb,"getSafeZoneName");function gr(e){return e.toLowerCase().replace(/[^a-z0-9]/g,"")}Kt(gr,"accountConstructKey");function Fb(e){let t=e.replace(new RegExp("\\P{ASCII}","gu"),"");return gr(t)===gr(e)&&gr(e)!==""}Kt(Fb,"hasAsciiStableConstructKey");var aR=Object.defineProperty,sR=(e,t)=>aR(e,"name",{value:t,configurable:!0});function Zb(e){return`${Te(e)}ImageTag`}sR(Zb,"imageTagParameterName");var cR=Object.defineProperty,uR=(e,t)=>cR(e,"name",{value:t,configurable:!0});function Vb(e){let t=new Map;for(let n of e){let o=gr(n);if(o==="")return{kind:"empty-construct-key",name:n};let r=t.get(o);if(r!==void 0)return{kind:"duplicate-construct-key",name:n,existingName:r,constructKey:o};t.set(o,n)}return null}uR(Vb,"findAccountNameCollision");var lR=Object.defineProperty,Do=(e,t)=>lR(e,"name",{value:t,configurable:!0}),fn="us-east-2";var He=Object.freeze([{code:"us-east-2",name:"US East",city:"Ohio",country:"USA",optIn:!1},{code:"us-west-2",name:"US West",city:"Oregon",country:"USA",optIn:!1},{code:"us-east-1",name:"US East",city:"N. Virginia",country:"USA",optIn:!1},{code:"eu-west-1",name:"EU West",city:"Ireland",country:"Ireland",optIn:!1},{code:"eu-central-1",name:"EU Central",city:"Frankfurt",country:"Germany",optIn:!1},{code:"ap-southeast-1",name:"Asia Pacific",city:"Singapore",country:"Singapore",optIn:!1},{code:"ap-northeast-1",name:"Asia Pacific",city:"Tokyo",country:"Japan",optIn:!1},{code:"ap-southeast-2",name:"Asia Pacific",city:"Sydney",country:"Australia",optIn:!1},{code:"us-west-1",name:"US West",city:"N. California",country:"USA",optIn:!1},{code:"ca-central-1",name:"Canada",city:"Central",country:"Canada",optIn:!1},{code:"af-south-1",name:"Africa",city:"Cape Town",country:"South Africa",optIn:!0},{code:"ap-east-1",name:"Asia Pacific",city:"Hong Kong",country:"Hong Kong",optIn:!0},{code:"ap-northeast-2",name:"Asia Pacific",city:"Seoul",country:"South Korea",optIn:!1},{code:"ap-northeast-3",name:"Asia Pacific",city:"Osaka",country:"Japan",optIn:!1},{code:"ap-south-1",name:"Asia Pacific",city:"Mumbai",country:"India",optIn:!1},{code:"ap-south-2",name:"Asia Pacific",city:"Hyderabad",country:"India",optIn:!0},{code:"ap-southeast-3",name:"Asia Pacific",city:"Jakarta",country:"Indonesia",optIn:!0},{code:"ap-southeast-4",name:"Asia Pacific",city:"Melbourne",country:"Australia",optIn:!0},{code:"eu-central-2",name:"EU Central",city:"Zurich",country:"Switzerland",optIn:!0},{code:"eu-north-1",name:"EU North",city:"Stockholm",country:"Sweden",optIn:!1},{code:"eu-south-1",name:"EU South",city:"Milan",country:"Italy",optIn:!0},{code:"eu-south-2",name:"EU South",city:"Spain",country:"Spain",optIn:!0},{code:"eu-west-2",name:"EU West",city:"London",country:"UK",optIn:!1},{code:"eu-west-3",name:"EU West",city:"Paris",country:"France",optIn:!1},{code:"me-central-1",name:"Middle East",city:"UAE",country:"UAE",optIn:!0},{code:"me-south-1",name:"Middle East",city:"Bahrain",country:"Bahrain",optIn:!0},{code:"sa-east-1",name:"South America",city:"S\xE3o Paulo",country:"Brazil",optIn:!1},{code:"ap-southeast-5",name:"Asia Pacific",city:"Kuala Lumpur",country:"Malaysia",optIn:!0},{code:"ap-southeast-6",name:"Asia Pacific",city:"Auckland",country:"New Zealand",optIn:!0},{code:"ap-southeast-7",name:"Asia Pacific",city:"Bangkok",country:"Thailand",optIn:!0},{code:"ap-east-2",name:"Asia Pacific",city:"Taipei",country:"Taiwan",optIn:!0},{code:"ca-west-1",name:"Canada West",city:"Calgary",country:"Canada",optIn:!0},{code:"il-central-1",name:"Israel",city:"Tel Aviv",country:"Israel",optIn:!0},{code:"mx-central-1",name:"Mexico",city:"Central",country:"Mexico",optIn:!0}]),Tt=Object.freeze(He.map(e=>e.code)),Ss=new Set(He.filter(e=>e.optIn).map(e=>e.code));function _s(e){return`${e} is an opt-in region: it must be enabled in the AWS account (Account settings \u2192 Regions) before deployment will succeed.`}Do(_s,"optInRegionWarning");function gn(e){return He.find(t=>t.code===e)}Do(gn,"getRegionInfo");function vn(e){let t=e.split("-");return t.length===3&&t[0]&&t[1]&&t[2]?`${t[0]}${t[1][0]}${t[2]}`:e}Do(vn,"abbreviateRegion");var dR=Object.freeze({"Europe/London":"eu-west-2","Europe/Jersey":"eu-west-2","Europe/Guernsey":"eu-west-2","Europe/Isle_of_Man":"eu-west-2","Europe/Dublin":"eu-west-1","Europe/Paris":"eu-west-3","Europe/Berlin":"eu-central-1","Europe/Amsterdam":"eu-central-1","Europe/Brussels":"eu-central-1","Europe/Luxembourg":"eu-central-1","Europe/Vienna":"eu-central-1","Europe/Prague":"eu-central-1","Europe/Warsaw":"eu-central-1","Europe/Budapest":"eu-central-1","Europe/Zurich":"eu-central-2","Europe/Stockholm":"eu-north-1","Europe/Oslo":"eu-north-1","Europe/Copenhagen":"eu-north-1","Europe/Helsinki":"eu-north-1","Europe/Tallinn":"eu-north-1","Europe/Riga":"eu-north-1","Europe/Vilnius":"eu-north-1","Europe/Rome":"eu-south-1","Europe/Malta":"eu-south-1","Europe/Athens":"eu-south-1","Europe/Madrid":"eu-south-2","Europe/Lisbon":"eu-south-2","America/New_York":"us-east-1","America/Detroit":"us-east-1","America/Toronto":"ca-central-1","America/Montreal":"ca-central-1","America/Halifax":"ca-central-1","America/Winnipeg":"ca-central-1","America/Chicago":"us-east-2","America/Indiana/Indianapolis":"us-east-2","America/Mexico_City":"us-east-2","America/Denver":"us-west-2","America/Phoenix":"us-west-2","America/Edmonton":"us-west-2","America/Vancouver":"us-west-2","America/Los_Angeles":"us-west-1","America/Tijuana":"us-west-1","America/Sao_Paulo":"sa-east-1","America/Argentina/Buenos_Aires":"sa-east-1","America/Santiago":"sa-east-1","America/Montevideo":"sa-east-1","America/Lima":"sa-east-1","America/Bogota":"us-east-1","Asia/Tokyo":"ap-northeast-1","Asia/Seoul":"ap-northeast-2","Asia/Hong_Kong":"ap-east-1","Asia/Shanghai":"ap-east-1","Asia/Taipei":"ap-east-1","Asia/Macau":"ap-east-1","Asia/Singapore":"ap-southeast-1","Asia/Kuala_Lumpur":"ap-southeast-1","Asia/Bangkok":"ap-southeast-1","Asia/Ho_Chi_Minh":"ap-southeast-1","Asia/Manila":"ap-southeast-1","Asia/Jakarta":"ap-southeast-3","Asia/Kolkata":"ap-south-1","Asia/Calcutta":"ap-south-1","Asia/Karachi":"ap-south-1","Asia/Dhaka":"ap-south-1","Asia/Colombo":"ap-south-1","Asia/Dubai":"me-central-1","Asia/Muscat":"me-central-1","Asia/Qatar":"me-south-1","Asia/Bahrain":"me-south-1","Asia/Riyadh":"me-south-1","Asia/Kuwait":"me-south-1","Asia/Jerusalem":"me-south-1","Australia/Sydney":"ap-southeast-2","Australia/Brisbane":"ap-southeast-2","Australia/Canberra":"ap-southeast-2","Australia/Melbourne":"ap-southeast-4","Australia/Hobart":"ap-southeast-4","Australia/Adelaide":"ap-southeast-4","Pacific/Auckland":"ap-southeast-2","Pacific/Honolulu":"us-west-1","Africa/Johannesburg":"af-south-1","Africa/Casablanca":"eu-south-2","Africa/Cairo":"me-south-1","Indian/Maldives":"ap-south-1"}),mR=Object.freeze({Europe:"eu-central-1",America:"us-east-1",Asia:"ap-southeast-1",Australia:"ap-southeast-2",Pacific:"ap-southeast-2",Africa:"af-south-1",Atlantic:"eu-west-1",Indian:"ap-south-1"}),pR=Object.freeze({"af-south-1":"eu-west-1","ap-east-1":"ap-southeast-1","ap-southeast-3":"ap-southeast-1","ap-southeast-4":"ap-southeast-2","eu-central-2":"eu-central-1","eu-south-1":"eu-central-1","eu-south-2":"eu-west-3","me-central-1":"ap-south-1","me-south-1":"ap-south-1"});function cf(e){return Ss.has(e)?pR[e]??fn:e}Do(cf,"toDeployableRegion");function Es(e){if(!e)return;let t=dR[e];if(t!==void 0)return cf(t);let n=e.split("/")[0];if(n===void 0)return;let o=mR[n];return o===void 0?void 0:cf(o)}Do(Es,"suggestRegionForTimezone");var fR=Object.defineProperty,wo=(e,t)=>fR(e,"name",{value:t,configurable:!0});function As(e){return at(e).replace(/[^a-z0-9]+/g,"-").replace(/^-+|-+$/g,"")}wo(As,"slugifyAccountName");function Bb(e,t){let n=As(e),o=As(t);return n===""?o:o===""?n:`${n}-${o}`}wo(Bb,"defaultConnectedAccountName");function Gb(e,t){let n=As(t);return n===""?e:`${e}-${n}`}wo(Gb,"suffixedAccountName");var Wb=new Set(He.map(e=>vn(e.code)));function Kb(e){let t=e.toLowerCase().split(/[-\s_]+/).filter(o=>o.length>0),n=t[t.length-1];if(n!==void 0&&Wb.has(n))return n}wo(Kb,"findTrailingRegionShortCode");function Hb(e){return`Account name must not end with a region code ("-${e}") \u2014 the region is added automatically when deploying. Remove the "-${e}" suffix.`}wo(Hb,"regionSuffixRejectionMessage");var gR=Object.defineProperty,hn=(e,t)=>gR(e,"name",{value:t,configurable:!0});function vr(e){return e instanceof Error?e:new Error(String(e))}hn(vr,"normaliseError");function Nt(e){return e instanceof Error?e.message:typeof e=="string"?e:e&&typeof e=="object"&&"message"in e?String(e.message):"An unknown error occurred"}hn(Nt,"getErrorMessage");function uf(e,t){return!e||typeof e!="object"?!1:"code"in e&&e.code===t}hn(uf,"hasErrorCode");function $s(e){if(!(!e||typeof e!="object")&&"code"in e&&typeof e.code=="string")return e.code}hn($s,"getErrorCode");function lf(e){return e instanceof Error?e.stack:void 0}hn(lf,"getErrorStack");function df(e){let t=Nt(e),n=$s(e);return n&&n!=="UNKNOWN_ERROR"?`[${n}] ${t}`:t}hn(df,"formatErrorString");var vR=Object.defineProperty,hR=(e,t)=>vR(e,"name",{value:t,configurable:!0});function Xb(e){let t,n=!1;return()=>(n||(t=e(),n=!0),t)}hR(Xb,"singleton");var yR=Object.defineProperty,mf=(e,t)=>yR(e,"name",{value:t,configurable:!0}),Yb=new Set(["NODE_OPTIONS","NODE_PATH","NODE_EXTRA_CA_CERTS","NODE_DEBUG","NODE_PRESERVE_SYMLINKS","LD_PRELOAD","LD_LIBRARY_PATH","LD_AUDIT","LD_BIND_NOW","DYLD_INSERT_LIBRARIES","DYLD_LIBRARY_PATH","DYLD_FRAMEWORK_PATH","PYTHONPATH","PYTHONSTARTUP","PERL5LIB","PERL5OPT","RUBYLIB","RUBYOPT","HOME","XDG_CONFIG_HOME","AWS_SHARED_CREDENTIALS_FILE","AWS_CONFIG_FILE","SHELL","BASH_ENV","ENV","ZDOTDIR"]);function Jb(e){return Object.fromEntries(Object.entries(e).filter(([t])=>!Yb.has(t.toUpperCase())))}mf(Jb,"filterDangerousEnvVars");var bR=/(fjall_(?:ak|dk)_)[A-Z2-7]{16}\.[A-Z2-7]{40}/g;function qb(e){return e.replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----(?:[^"\\]|\\[\\nrt"])*?-----END [A-Z ]*PRIVATE KEY-----/g,"-----BEGIN [REDACTED] PRIVATE KEY-----...-----END [REDACTED] PRIVATE KEY-----").replace(/-----BEGIN [A-Z ]*PRIVATE KEY-----[\s\S]*?-----END [A-Z ]*PRIVATE KEY-----/g,"-----BEGIN [REDACTED] PRIVATE KEY-----...-----END [REDACTED] PRIVATE KEY-----").replace(/(\w+:\/\/[^:]+:)[^@]+(@)/gi,"$1***$2").replace(/(?<![a-zA-Z])(password|passwd|secret|api[_-]?key|token|auth|credential)([=:])["']?[^\s"']+/gi,"$1$2***").replace(/\b(ghu_|ghs_|ghp_|gho_|github_pat_)[A-Za-z0-9_]+/g,"$1***").replace(/\b(sk|rk)_(live|test)_[A-Za-z0-9]{8,}/g,"$1_$2_***").replace(/\bwhsec_[A-Za-z0-9]{8,}/g,"whsec_***").replace(/(?<=Authorization:\s*Bearer\s+)[A-Za-z0-9._~+/=-]+/gi,"***").replace(/\b(AKIA|ASIA)[A-Z0-9]{12,}\b/g,"$1***").replace(/(?<=aws_secret_access_key\s*=\s*["']?|SecretAccessKey[=:]\s*|"(aws)?secretAccessKey":\s*"|"aws_secret_access_key":\s*")[A-Za-z0-9/+=]{40,}/gi,"***").replace(/(?<="(aws)?sessionToken":\s*"|"aws_session_token":\s*")[^"]+/gi,"***").replace(/(?<=aws_session_token\s*[=:]\s*["']?|SessionToken[=:]\s*["']?)[^\s"']+/gi,"***").replace(/(?<="(internal[Aa]piKey|fjallCallbackToken)":\s*")[^"]+/g,"***").replace(bR,"$1***")}mf(qb,"maskSensitiveOutput");function Qb(e){let t=[],n="",o=!1,r=!1,i=!1,a=!1;for(let c of e){if(i){n+=c,i=!1;continue}if(c==="\\"&&!o){i=!0;continue}if(c==="'"&&!r){o=!o,a=!0;continue}if(c==='"'&&!o){r=!r,a=!0;continue}if(c===" "&&!o&&!r){(n||a)&&(t.push(n),n="",a=!1);continue}n+=c}if(o||r)throw new Error(`Unbalanced ${o?"single":"double"} quote in command: ${e.slice(0,80)}`);if(i)throw new Error(`Trailing backslash in command: ${e.slice(0,80)}`);return(n||a)&&t.push(n),t}mf(Qb,"parseShellArgs");var SR=Object.defineProperty,_R=(e,t)=>SR(e,"name",{value:t,configurable:!0}),ER=_R(e=>new Promise(t=>setTimeout(t,e)),"sleep");var AR=Object.defineProperty,eS=(e,t)=>AR(e,"name",{value:t,configurable:!0});async function tS(e,t,n){let o=new Array(e.length);if(e.length===0)return o;let r=Math.max(1,Math.min(t,e.length)),i=0,a=eS(async()=>{for(;i<e.length;){let c=i++;try{let u=await n(e[c],c);o[c]={status:"fulfilled",value:u}}catch(u){o[c]={status:"rejected",reason:u}}}},"worker");return await Promise.all(Array.from({length:r},()=>a())),o}eS(tS,"mapSettledWithConcurrency");var $R=Object.defineProperty,yn=(e,t)=>$R(e,"name",{value:t,configurable:!0}),pf=["production","staging","development","platform","compliance"],rS={production:"Production",staging:"Staging",development:"Development",platform:"Platform",compliance:"Compliance"},xR=new Set(pf);function Is(e){return xR.has(e)}yn(Is,"isAccountStage");var zo={ROOT:"root",PLATFORM:"platform"},IR=[...pf,zo.ROOT];function nS(e){return Is(e)?rS[e]:e.charAt(0).toUpperCase()+e.slice(1)}yn(nS,"getEnvironmentLabel");var oS=["organisation","platform","account"],TR=s.enum(oS),xs={ORGANISATION:"organisation",PLATFORM:"platform",ACCOUNT:"account"},NR={[xs.ORGANISATION]:!0,[xs.PLATFORM]:!0,[xs.ACCOUNT]:!0},RR=new Set(Object.keys(NR));function iS(e){return RR.has(e)}yn(iS,"isAccountTier");function ff(e){return e===zo.ROOT?"organisation":e===zo.PLATFORM?"platform":"account"}yn(ff,"environmentToTier");function aS(e){return e==null||e===""||e===zo.ROOT?null:Is(e)?e:null}yn(aS,"stageFromWireEnvironment");function Mo(e){return e.tier??ff(e.environment)}yn(Mo,"accountTier");var PR=Object.defineProperty,jo=(e,t)=>PR(e,"name",{value:t,configurable:!0});var sS=Object.freeze({"AWS::IAM::Role":"security","AWS::IAM::Policy":"security","AWS::IAM::OIDCProvider":"security","AWS::EC2::SecurityGroup":"security","AWS::KMS::Key":"security","AWS::KMS::Alias":"security","AWS::EC2::VPC":"network","AWS::EC2::Subnet":"network","AWS::EC2::InternetGateway":"network","AWS::EC2::NatGateway":"network","AWS::EC2::RouteTable":"network","AWS::EC2::Route":"network","AWS::EC2::VPCGatewayAttachment":"network","AWS::EC2::SubnetRouteTableAssociation":"network","AWS::EC2::EIP":"network","AWS::ECS::Cluster":"compute","AWS::ECS::Service":"compute","AWS::ECS::TaskDefinition":"compute","AWS::Lambda::Function":"compute","AWS::ElasticLoadBalancingV2::LoadBalancer":"compute","AWS::ElasticLoadBalancingV2::TargetGroup":"compute","AWS::ElasticLoadBalancingV2::Listener":"compute","AWS::ElasticLoadBalancingV2::ListenerRule":"compute","AWS::RDS::DBInstance":"database","AWS::RDS::DBCluster":"database","AWS::SecretsManager::Secret":"database","AWS::S3::Bucket":"storage","AWS::S3::BucketPolicy":"storage","AWS::CloudTrail::Trail":"monitoring","AWS::CloudWatch::Alarm":"monitoring","AWS::Logs::LogGroup":"monitoring","AWS::Events::EventBus":"events","AWS::Events::Rule":"events","AWS::ECR::Repository":"registry","AWS::CodeBuild::Project":"registry","AWS::Route53::RecordSet":"dns","AWS::CertificateManager::Certificate":"dns","AWS::CloudFront::Distribution":"dns","AWS::Backup::BackupVault":"backup","AWS::Backup::BackupPlan":"backup","AWS::Backup::BackupSelection":"backup","AWS::SSO::PermissionSet":"identity","AWS::SSO::Assignment":"identity","AWS::Organizations::Account":"identity","AWS::CDK::Metadata":"compute","AWS::CloudFormation::CustomResource":"compute","AWS::CloudFormation::WaitCondition":"compute","AWS::CloudFormation::WaitConditionHandle":"compute"}),gf=new Set;function cS(e){if(!e)return"compute";if(e.startsWith("Custom::"))return sS[e]??"compute";let t=sS[e];return t||gf.add(e),t??"compute"}jo(cS,"categoriseResource");function CR(){return new Set(gf)}jo(CR,"getUnmappedResourceTypes");function kR(){gf.clear()}jo(kR,"clearUnmappedResourceTypes");var OR=Object.freeze({"AWS::EC2::NatGateway":120,"AWS::RDS::DBInstance":300,"AWS::RDS::DBCluster":300,"AWS::CloudFront::Distribution":300,"AWS::ECS::Service":180,"AWS::ElasticLoadBalancingV2::LoadBalancer":60,"AWS::EC2::SecurityGroup":10,"AWS::IAM::Role":15,"AWS::IAM::Policy":15,"AWS::IAM::OIDCProvider":10,"AWS::S3::Bucket":10,"AWS::S3::BucketPolicy":5,"AWS::Lambda::Function":30,"AWS::EC2::VPC":15,"AWS::EC2::Subnet":15,"AWS::EC2::InternetGateway":10,"AWS::EC2::RouteTable":5,"AWS::EC2::Route":5,"AWS::EC2::VPCGatewayAttachment":10,"AWS::EC2::SubnetRouteTableAssociation":5,"AWS::EC2::EIP":10,"AWS::ECS::Cluster":15,"AWS::ECS::TaskDefinition":10,"AWS::ElasticLoadBalancingV2::TargetGroup":10,"AWS::ElasticLoadBalancingV2::Listener":10,"AWS::ElasticLoadBalancingV2::ListenerRule":5,"AWS::SecretsManager::Secret":10,"AWS::Logs::LogGroup":5,"AWS::CloudWatch::Alarm":10,"AWS::CloudTrail::Trail":15,"AWS::Events::EventBus":5,"AWS::Events::Rule":5,"AWS::ECR::Repository":10,"AWS::Route53::RecordSet":30,"AWS::CertificateManager::Certificate":60,"AWS::KMS::Key":15,"AWS::KMS::Alias":5,"AWS::Backup::BackupVault":10,"AWS::Backup::BackupPlan":10,"AWS::Backup::BackupSelection":10,"AWS::SSO::PermissionSet":15,"AWS::SSO::Assignment":10,"AWS::Organizations::Account":60}),DR=30;function uS(e){return OR[e]??DR}jo(uS,"getExpectedDuration");var wR=Object.freeze({"AWS::Lambda::Function":"Lambda Function","AWS::IAM::Role":"IAM Role","AWS::IAM::Policy":"IAM Policy","AWS::S3::Bucket":"S3 Bucket","AWS::DynamoDB::Table":"DynamoDB Table","AWS::EC2::Instance":"EC2 Instance","AWS::EC2::SecurityGroup":"Security Group","AWS::EC2::VPC":"VPC","AWS::EC2::Subnet":"Subnet","AWS::EC2::InternetGateway":"Internet Gateway","AWS::EC2::RouteTable":"Route Table","AWS::EC2::Route":"Route","AWS::ECS::Cluster":"ECS Cluster","AWS::ECS::Service":"ECS Service","AWS::ECS::TaskDefinition":"Task Definition","AWS::ElasticLoadBalancingV2::LoadBalancer":"Load Balancer","AWS::ElasticLoadBalancingV2::TargetGroup":"Target Group","AWS::ElasticLoadBalancingV2::Listener":"Listener","AWS::CloudFormation::Stack":"CloudFormation Stack","AWS::CDK::Metadata":"CDK Metadata","Custom::CDKBucketDeployment":"Bucket Deployment","AWS::SSM::Parameter":"SSM Parameter","AWS::CloudWatch::Alarm":"CloudWatch Alarm","AWS::Logs::LogGroup":"Log Group","AWS::ApiGateway::RestApi":"API Gateway","AWS::ApiGateway::Deployment":"API Deployment","AWS::ApiGateway::Stage":"API Stage","AWS::ApiGateway::Method":"API Method","AWS::ApiGateway::Resource":"API Resource","AWS::CloudFront::Distribution":"CloudFront Distribution","AWS::Route53::RecordSet":"Route53 Record","AWS::RDS::DBInstance":"RDS Instance","AWS::RDS::DBCluster":"RDS Cluster","AWS::SQS::Queue":"SQS Queue","AWS::SNS::Topic":"SNS Topic","AWS::Events::Rule":"EventBridge Rule","AWS::StepFunctions::StateMachine":"Step Function","AWS::EC2::NatGateway":"NAT Gateway","AWS::EC2::EIP":"Elastic IP","AWS::EC2::VPCGatewayAttachment":"Gateway Attachment","AWS::EC2::SubnetRouteTableAssociation":"Route Association","AWS::CloudTrail::Trail":"CloudTrail","AWS::IAM::OIDCProvider":"OIDC Provider","AWS::Events::EventBus":"Event Bus","AWS::Backup::BackupVault":"Backup Vault","AWS::Backup::BackupPlan":"Backup Plan","AWS::Backup::BackupSelection":"Backup Selection","AWS::SecretsManager::Secret":"Secret","AWS::KMS::Key":"KMS Key","AWS::KMS::Alias":"KMS Alias","AWS::ECR::Repository":"ECR Repository","AWS::CertificateManager::Certificate":"Certificate","AWS::ElasticLoadBalancingV2::ListenerRule":"Listener Rule","AWS::EC2::IPAM":"IPAM","AWS::EC2::IPAMPool":"IPAM Pool","AWS::EC2::IPAMPoolCidr":"IPAM Pool CIDR","Custom::ram":"RAM","Custom::ipamDelegateAdmin":"IPAM Delegate Admin","Custom::CostAllocationTags":"Cost Allocation Tags","Custom::ActivateOrganisationsAccess":"Activate Organisations Access","Custom::Organizations_TagResource":"Organisations Tag Resource","AWS::CloudFormation::CustomResource":"Custom Resource","AWS::CloudFormation::WaitCondition":"Wait Condition","AWS::CloudFormation::WaitConditionHandle":"Wait Condition Handle","AWS::SSO::PermissionSet":"SSO Permission Set","AWS::SSO::Assignment":"SSO Assignment","AWS::Organizations::Account":"Organisations Account","AWS::S3::BucketPolicy":"S3 Bucket Policy","AWS::CodeBuild::Project":"CodeBuild Project"});function lS(e){return wR[e]||e.split("::").pop()||e}jo(lS,"getFriendlyResourceType");var zR=Object.defineProperty,MR=(e,t)=>zR(e,"name",{value:t,configurable:!0}),jR={"github.com":"github","gitlab.com":"gitlab","bitbucket.org":"bitbucket"},UR=/^https?:\/\/([^/]+)\/(.+?)\/([^/.]+?)(?:\.git)?$/,LR=/^git@([^:]+):(.+?)\/([^/.]+?)(?:\.git)?$/,FR=/^ssh:\/\/[^@]+@([^:/]+)(?::\d+)?\/(.+?)\/([^/.]+?)(?:\.git)?$/;function dS(e){if(!e)return null;let t=e.replace(/^(https?:\/\/)[^@]+@/,"$1"),n=t.match(UR)??t.match(LR)??e.match(FR);if(!n)return null;let[,o,r,i]=n;return!o||!r||!i?null:{provider:jR[o]??"other",owner:r,repo:i,host:o}}MR(dS,"parseGitRemoteUrl");var vf=["read","write","deploy","secrets:read","secrets:write","destroy","admin","applications:read","applications:deploy","deploy:oidc:mint"],mS={read:"user",write:"user",deploy:"user","secrets:read":"user","secrets:write":"user",destroy:"user",admin:"admin","applications:read":"user","applications:deploy":"user","deploy:oidc:mint":"machine"},ZR=vf.filter(e=>mS[e]==="machine"),VR=vf.filter(e=>mS[e]==="user");var BR=Object.defineProperty,bn=(e,t)=>BR(e,"name",{value:t,configurable:!0}),Ns=/^[a-zA-Z_][a-zA-Z0-9._-]*$/,hf="Secret name must start with a letter or underscore and contain only letters, numbers, underscores, hyphens, or periods",Uo=/^[a-zA-Z][a-zA-Z0-9._-]*$/,Rs="Must start with a letter and contain only letters, numbers, periods, hyphens, or underscores";var Ts=s.string().regex(Uo,Rs),pS=s.object({app:Ts.describe("Application name"),cluster:Ts.optional().describe("Cluster name"),service:Ts.optional().describe("Service name"),lambda:Ts.optional().describe("Lambda function name")}).strict().refine(e=>!(e.service&&!e.cluster),{message:"Cluster is required when service is specified"}).refine(e=>!(e.lambda&&(e.cluster||e.service)),{message:"Lambda is mutually exclusive with cluster and service"}).refine(e=>e.cluster!=="lambda",{message:'The cluster name "lambda" is reserved for lambda-scoped parameter paths'});function yf(e){let t=[e.app];return e.lambda?t.push("lambda",e.lambda):(e.cluster&&t.push(e.cluster),e.service&&e.cluster&&t.push(e.service)),t}bn(yf,"buildNamespaceParts");function bf(e,t){let n=yf(e);return t&&n.push(t),"/"+n.join("/")}bn(bf,"buildParameterPath");function Sf(e){let t=e.split("/").filter(Boolean);if(t.length<2)return null;let n=t[t.length-1]??"",o={app:t[0]??""};return t.length>=4&&t[1]==="lambda"?o.lambda=t[2]:t.length>=3&&(o.cluster=t[1],t.length>=4&&(o.service=t[2])),{namespace:o,name:n}}bn(Sf,"parseParameterPath");function fS(e){let t=Sf(e);return t?pS.safeParse(t.namespace).success&&bf(t.namespace,t.name)===e:!1}bn(fS,"isManageablePath");function gS(e){let t={};for(let n of e.split(`
120
120
  `)){let o=n.trim();if(!o||o.startsWith("#"))continue;let r=o.replace(/^export\s+/,""),i=r.indexOf("=");if(i===-1)continue;let a=r.slice(0,i).trim();if(!Ns.test(a))continue;let c=r.slice(i+1);c.length>=2&&c.startsWith('"')&&c.endsWith('"')?t[a]=c.slice(1,-1).replace(/\\([\\"$`nr])/g,(u,l)=>l==="n"?`
121
- `:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}bn(gS,"parseDotEnv");function vS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}bn(vS,"escapeDotEnvValue");var hS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),GR=s.object({accounts:s.array(hS)});var WR=Object.defineProperty,hr=(e,t)=>WR(e,"name",{value:t,configurable:!0});function _f(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}hr(_f,"deriveRegionsFromOrgConfig");function Ef(e){return e.environment??Mo(e)}hr(Ef,"environmentOrTier");function Af(e,t){return`${e.toLowerCase()}-${vn(t)}`}hr(Af,"generateTargetName");function $f(e,t){let n=[];for(let o of e){if(Mo(o)==="organisation")continue;let r=Ef(o);for(let i of t)n.push({name:Af(o.name,i),accountName:o.name,accountId:o.id,environment:r,region:i})}return n.sort((o,r)=>{let i=o.environment.localeCompare(r.environment);if(i!==0)return i;let a=o.accountName.localeCompare(r.accountName);return a!==0?a:o.region.localeCompare(r.region)})}hr($f,"deriveTargets");function yS(e){return $f(e.providerAccounts,_f(e))}hr(yS,"deriveAllTargets");function KR(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),o=t.filter(r=>!n.has(r));return{...e,secondaryRegions:o.length>0?o:void 0}}hr(KR,"mergeSecondaryRegions");function bS(e,t){return e.find(n=>n.name===t)}hr(bS,"findTarget");var HR=Object.defineProperty,XR=(e,t)=>HR(e,"name",{value:t,configurable:!0});function SS(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}XR(SS,"buildAppConfigPath");var YR=Object.defineProperty,Sn=(e,t)=>YR(e,"name",{value:t,configurable:!0}),xf="infrastructure.ts",If="fjall";function _S(e,t){let n=t?.excludedPathPrefixes,o=t?.excludedPathSegments,r=[];for(let i of e){if(!Tf(i.path)||n&&AS(i.path,n)||o&&$S(i.path,o))continue;let a=Nf(i.path);a!==null&&r.push({configPath:ES(i.path),boundaryPath:a})}return r}Sn(_S,"findInfrastructurePaths");function Tf(e){return e===xf||e.endsWith(`/${xf}`)}Sn(Tf,"isInfrastructureFile");function Nf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===If)return t.slice(0,n+1).join("/");return null}Sn(Nf,"findBoundaryPath");function ES(e){return e.slice(0,-`/${xf}`.length)}Sn(ES,"toConfigDir");function AS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}Sn(AS,"hasExcludedPrefix");function $S(e,t){let n=e.split("/");for(let o=0;o<n.length-1;o++)if(t.has(n[o]))return!0;return!1}Sn($S,"hasExcludedSegment");var JR=Object.defineProperty,Rf=(e,t)=>JR(e,"name",{value:t,configurable:!0});function xS(e){if(e.length===0)return null;let t=[];for(let o of e){let r=IS(o.boundaryPath);if(r===null)return null;t.push(r)}let n=TS(t);return n.length===0?null:n.join("/")}Rf(xS,"inferContainerFromCandidates");function IS(e){let t=e.split("/").filter(o=>o.length>0);if(t.length===0||t[t.length-1]!==If)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}Rf(IS,"extractContainer");function TS(e){if(e.length===0)return[];let[t,...n]=e,o=[];for(let r=0;r<t.length;r+=1){let i=t[r];for(let a of n)if(a[r]!==i)return o;o.push(i)}return o}Rf(TS,"longestCommonPrefix");var qR=Object.defineProperty,NS=(e,t)=>qR(e,"name",{value:t,configurable:!0}),RS=["fjall","organisation","platform","account"];function PS(e){return RS.includes(e.toLowerCase())}NS(PS,"isReservedAppName");var CS="-cache";function kS(e){return at(e).endsWith(CS)}NS(kS,"hasReservedAppNameSuffix");var QR=Object.defineProperty,Pf=(e,t)=>QR(e,"name",{value:t,configurable:!0});function DS(e){return{success:!0,data:e}}Pf(DS,"success");function Lo(e){return{success:!1,error:e}}Pf(Lo,"failure");var OS="sha256:",Ps=12,eP=new RegExp(`-sha-[0-9a-f]{${Ps}}$`);function wS(e,t,n){if(!e.startsWith(OS))return Lo(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let o=e.slice(OS.length);if(o.length<Ps)return Lo(new Error(`digest hex payload too short (need >=${Ps} chars, got ${o.length})`));let r=t.trim();if(r==="")return Lo(new Error("serviceName must be a non-empty string"));let i;if(n!==void 0){let u=n.trim();if(u==="")return Lo(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));i=u.toLowerCase()}let a=o.slice(0,Ps).toLowerCase(),c=i!==void 0?`${r.toLowerCase()}-${i}`:r.toLowerCase();return DS(`${c}-sha-${a}`)}Pf(wS,"deriveContentHashTag");var tP=Object.defineProperty,rP=(e,t)=>tP(e,"name",{value:t,configurable:!0}),zS=["full","code-only","rollback","restart"],nP=s.enum(zS),MS=/^[a-zA-Z0-9._-]+$/,jS=s.string().min(1).max(128).regex(MS),US=s.object({serviceName:s.string().min(1),imageTag:jS,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),oP=s.array(US);function LS(e,t){return`${e}${t}`}rP(LS,"artefactOutputKey");var iP=Object.defineProperty,FS=(e,t)=>iP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],Cf=new Set(ft);function kf(e){return typeof e=="string"&&Cf.has(e)}FS(kf,"isPatternType");var _n={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},ZS=ft.filter(e=>_n[e].deployable),Of=ft.filter(e=>_n[e].artefact==="opennext-lambda"),aP=new Set(Of);function Df(e){return e!=null&&aP.has(e)}FS(Df,"isOpenNextPatternType");var Fo=["multipage","spa"];var sP=Object.defineProperty,wf=(e,t)=>sP(e,"name",{value:t,configurable:!0}),VS="noreply";function BS(e){return`${VS}@${e}`}wf(BS,"defaultFormsFromAddress");function GS(e){return`https://${e}`}wf(GS,"defaultFormsCorsOrigin");function Cs(e,t){let n=e.split("@");if(n.length!==2)return!1;let[o,r]=n;return o===void 0||o===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}wf(Cs,"isAddressAtDomain");var WS=1;var cP=s.object({appDomain:s.string().min(1),parentDelegationRoleArn:s.string().min(1).optional()}).strict(),KS={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:cP.optional()},uP=s.object(KS).strict(),lP=s.object({...KS,version:s.literal(WS),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var mP=Object.defineProperty,En=(e,t)=>mP(e,"name",{value:t,configurable:!0});function HS(e){return e.success===!0}En(HS,"isSuccess");function XS(e){return e.success===!1}En(XS,"isFailure");function R(e){return{success:!0,data:e}}En(R,"success");function N(e){return{success:!1,error:e}}En(N,"failure");async function YS(e){try{let t=await e();return R(t)}catch(t){return N(vr(t))}}En(YS,"tryAsync");function JS(e){try{let t=e();return R(t)}catch(t){return N(vr(t))}}En(JS,"trySync");var pP=Object.defineProperty,fP=(e,t)=>pP(e,"name",{value:t,configurable:!0}),qS=/^[a-zA-Z][a-zA-Z0-9-]*$/,gP=Uo.source.replace(/^\^|\$$/g,""),w=Object.freeze({IDENTIFIER:qS,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:qS,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${gP})+$`),SECRET_NAME:Ns,SSM_COMPONENT:Uo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function zf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],o=t[2];if(n===void 0||o===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let i=o==="minute"||o==="hour"||o==="day";if(!(i&&r!==1)&&!(!i&&r===1))return o==="minute"||o==="minutes"?{everyMs:r*6e4}:o==="hour"||o==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}fP(zf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:hf,SSM_COMPONENT:Rs,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var vP=Object.defineProperty,Xe=(e,t)=>vP(e,"name",{value:t,configurable:!0}),hP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],yP=Object.freeze(hP.flatMap(e=>{let t=gn(e);return t?[t]:[]})),Mf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function ks(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}Xe(ks,"parseRegionList");function jf(e){return Tt.includes(e)}Xe(jf,"isValidRegion");function Uf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}Xe(Uf,"isValidRegionFormat");function Lf(e){if(!e)return Mf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],o=t.length>1?t[1]:"",r=[];return n&&o&&(r=Tt.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=Tt.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Mf.slice(0,3)}Xe(Lf,"getSuggestions");function Ff(e){if(jf(e))return!0;let t=Lf(e);return Uf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}Xe(Ff,"validateRegion");function QS(e){if(!e||e.trim()==="")return!0;let t=ks(e);for(let n of t){let o=Ff(n);if(o!==!0)return o}return!0}Xe(QS,"validateRegionList");function Zf(e,t){return e.filter(n=>n!==t)}Xe(Zf,"filterDuplicateRegions");function Vf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}Xe(Vf,"toRegionOption");function e_(){return He.map(Vf)}Xe(e_,"getRegionOptions");function t_(e){return He.filter(t=>t.code!==e).map(Vf)}Xe(t_,"getRegionOptionsExcluding");function r_(e){let t=He.find(n=>n.code===e);return t?t.city:e}Xe(r_,"getRegionName");function n_(e){return t=>{let n=ks(t);return Zf(n,e)}}Xe(n_,"createRegionFormatter");var Os="3.1.0";var Ds=["Aurora","Instance","GlobalAurora","ClickHouse"],An=["FARGATE","FARGATE_SPOT","EC2"],st=["standard","resilient","enterprise"],ws=["tinkerer","lightweight","standard","resilient","enterprise"],Bf="custom",Zo=[...ws,Bf];var bP=Object.defineProperty,SP=(e,t)=>bP(e,"name",{value:t,configurable:!0}),lj=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Vo=["ecs","lambda","ec2"],$n=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),zs=["code","container"],Bo=Object.freeze({CODE:"code",CONTAINER:"container"}),Ms=["ARM_64","X86_64"],o_="ARM_64",Go=["NONE","AWS_IAM"],js=["public","internal"],Us=["CPU","MEMORY"],Ls=["ARM","STANDARD"],Gf=["Instance","Aurora"],xn=["postgresql","mysql"],i_=["foundation","compliance","hardened"];var Fs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],a_=[0,1,5,10,15,30,60];function Ye(e,t){return e.includes(t)}SP(Ye,"constIncludes");var s_=1,c_=65535,gj=Object.freeze({postgresql:5432,mysql:3306}),u_=128,l_=10240,Zs=1,Vs=900,Wf=1,Kf=1e3,In=100,d_=100;var m_=3e3;var p_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],f_=["standard","assets","upload","website"],Tn=["AES256","KMS"];var _P=Object.defineProperty,Wo=(e,t)=>_P(e,"name",{value:t,configurable:!0}),we=Wo(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),yr={check:Wo(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Ko=Wo(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(w.RESOURCE_NAME,d.RESOURCE_NAME),v_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(w.BUCKET_NAME,d.BUCKET_NAME),h_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(w.DATABASE_NAME,d.DATABASE_NAME);function Bs(e,t=w.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(o=>!o.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(o=>!o.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Wo(Bs,"identifierSchema");var le=Bs(d.MAX_LENGTH.APP_NAME),Ej=Bs(d.MAX_LENGTH.APP_NAME,w.NEW_APP_NAME,d.NEW_APP_NAME),br=s.number().int(d.PORT.INTEGER).min(s_,d.PORT.MIN).max(c_,d.PORT.MAX),be=s.object({key:s.string(),sourceText:s.string()}).strict(),EP=s.object({__identifier:s.string()}).strict(),AP=s.object({__expression:s.string()}).strict(),$P=s.object({__call:s.string()}).strict(),xP=s.union([EP,AP,$P]),IP=s.union([s.string(),s.number(),s.boolean(),xP]),Nn=s.record(s.string().regex(w.ENV_VAR_NAME,d.ENV_VAR_NAME),IP),TP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),y_=s.record(s.string(),TP),Aj=s.record(s.string(),s.unknown()),Hf=s.enum(Zo).describe(`Application type must be one of: ${Zo.join(", ")}`),Xf=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),NP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),b_=s.object({sourceText:s.string(),position:NP,afterManagedResource:s.object({type:RP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),S_=s.union([s.object({tier:s.enum(st)}).strict(),s.literal(!1)]),__=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),PP=Bs(d.MAX_LENGTH.ORGANISATION_NAME),CP=s.string().regex(w.EMAIL,d.EMAIL),g_=s.string().refine(e=>Tt.includes(e),{message:d.REGION}),$j=s.object({name:PP,email:CP,accountName:s.string().optional(),primaryRegion:g_.optional().default(fn),secondaryRegions:s.array(g_).optional(),security:s.enum(i_).optional(),force:s.boolean().optional()}).strict();function Ho(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
121
+ `:l==="r"?"\r":l):c.length>=2&&c.startsWith("'")&&c.endsWith("'")?t[a]=c.slice(1,-1):t[a]=c}return t}bn(gS,"parseDotEnv");function vS(e){return e.replace(/\\/g,"\\\\").replace(/"/g,'\\"').replace(/\$/g,"\\$").replace(/`/g,"\\`").replace(/\n/g,"\\n").replace(/\r/g,"\\r")}bn(vS,"escapeDotEnvValue");var hS=s.object({awsAccountId:s.string(),accountName:s.string().nullable(),status:s.string(),role:s.string(),roleArn:s.string(),environment:s.string().optional(),connectedAt:s.string()}),GR=s.object({accounts:s.array(hS)});var WR=Object.defineProperty,hr=(e,t)=>WR(e,"name",{value:t,configurable:!0});function _f(e){let t=[e.primaryRegion,...e.secondaryRegions??[],e.disasterRecoveryRegion].filter(n=>n!==void 0);return[...new Set(t)]}hr(_f,"deriveRegionsFromOrgConfig");function Ef(e){return e.environment??Mo(e)}hr(Ef,"environmentOrTier");function Af(e,t){return`${e.toLowerCase()}-${vn(t)}`}hr(Af,"generateTargetName");function $f(e,t){let n=[];for(let o of e){if(Mo(o)==="organisation")continue;let r=Ef(o);for(let i of t)n.push({name:Af(o.name,i),accountName:o.name,accountId:o.id,environment:r,region:i})}return n.sort((o,r)=>{let i=o.environment.localeCompare(r.environment);if(i!==0)return i;let a=o.accountName.localeCompare(r.accountName);return a!==0?a:o.region.localeCompare(r.region)})}hr($f,"deriveTargets");function yS(e){return $f(e.providerAccounts,_f(e))}hr(yS,"deriveAllTargets");function KR(e,t){if(t.length===0)return e;let n=new Set([e.primaryRegion,e.disasterRecoveryRegion].filter(Boolean)),o=t.filter(r=>!n.has(r));return{...e,secondaryRegions:o.length>0?o:void 0}}hr(KR,"mergeSecondaryRegions");function bS(e,t){return e.find(n=>n.name===t)}hr(bS,"findTarget");var HR=Object.defineProperty,XR=(e,t)=>HR(e,"name",{value:t,configurable:!0});function SS(e,t){if(t!==void 0){if(t.trim()==="")throw new Error("buildAppConfigPath: container must be a non-empty string");return`${t}/fjall/${e}`}return`fjall/${e}`}XR(SS,"buildAppConfigPath");var YR=Object.defineProperty,Sn=(e,t)=>YR(e,"name",{value:t,configurable:!0}),xf="infrastructure.ts",If="fjall";function _S(e,t){let n=t?.excludedPathPrefixes,o=t?.excludedPathSegments,r=[];for(let i of e){if(!Tf(i.path)||n&&AS(i.path,n)||o&&$S(i.path,o))continue;let a=Nf(i.path);a!==null&&r.push({configPath:ES(i.path),boundaryPath:a})}return r}Sn(_S,"findInfrastructurePaths");function Tf(e){return e===xf||e.endsWith(`/${xf}`)}Sn(Tf,"isInfrastructureFile");function Nf(e){let t=e.split("/");for(let n=0;n<t.length-1;n++)if(t[n]===If)return t.slice(0,n+1).join("/");return null}Sn(Nf,"findBoundaryPath");function ES(e){return e.slice(0,-`/${xf}`.length)}Sn(ES,"toConfigDir");function AS(e,t){for(let n of t)if(e.startsWith(n))return!0;return!1}Sn(AS,"hasExcludedPrefix");function $S(e,t){let n=e.split("/");for(let o=0;o<n.length-1;o++)if(t.has(n[o]))return!0;return!1}Sn($S,"hasExcludedSegment");var JR=Object.defineProperty,Rf=(e,t)=>JR(e,"name",{value:t,configurable:!0});function xS(e){if(e.length===0)return null;let t=[];for(let o of e){let r=IS(o.boundaryPath);if(r===null)return null;t.push(r)}let n=TS(t);return n.length===0?null:n.join("/")}Rf(xS,"inferContainerFromCandidates");function IS(e){let t=e.split("/").filter(o=>o.length>0);if(t.length===0||t[t.length-1]!==If)return null;let n=t.slice(0,t.length-1);return n.length===0?null:n}Rf(IS,"extractContainer");function TS(e){if(e.length===0)return[];let[t,...n]=e,o=[];for(let r=0;r<t.length;r+=1){let i=t[r];for(let a of n)if(a[r]!==i)return o;o.push(i)}return o}Rf(TS,"longestCommonPrefix");var qR=Object.defineProperty,NS=(e,t)=>qR(e,"name",{value:t,configurable:!0}),RS=["fjall","organisation","platform","account"];function PS(e){return RS.includes(e.toLowerCase())}NS(PS,"isReservedAppName");var CS="-cache";function kS(e){return at(e).endsWith(CS)}NS(kS,"hasReservedAppNameSuffix");var QR=Object.defineProperty,Pf=(e,t)=>QR(e,"name",{value:t,configurable:!0});function DS(e){return{success:!0,data:e}}Pf(DS,"success");function Lo(e){return{success:!1,error:e}}Pf(Lo,"failure");var OS="sha256:",Ps=12,eP=new RegExp(`-sha-[0-9a-f]{${Ps}}$`);function wS(e,t,n){if(!e.startsWith(OS))return Lo(new Error(`expected sha256:... digest, got ${e.slice(0,32)}`));let o=e.slice(OS.length);if(o.length<Ps)return Lo(new Error(`digest hex payload too short (need >=${Ps} chars, got ${o.length})`));let r=t.trim();if(r==="")return Lo(new Error("serviceName must be a non-empty string"));let i;if(n!==void 0){let u=n.trim();if(u==="")return Lo(new Error("target, when supplied, must be a non-empty string; omit the argument instead"));i=u.toLowerCase()}let a=o.slice(0,Ps).toLowerCase(),c=i!==void 0?`${r.toLowerCase()}-${i}`:r.toLowerCase();return DS(`${c}-sha-${a}`)}Pf(wS,"deriveContentHashTag");var tP=Object.defineProperty,rP=(e,t)=>tP(e,"name",{value:t,configurable:!0}),zS=["full","code-only","rollback","restart"],nP=s.enum(zS),MS=/^[a-zA-Z0-9._-]+$/,jS=s.string().min(1).max(128).regex(MS),US=s.object({serviceName:s.string().min(1),imageTag:jS,imageDigest:s.string().min(1).optional(),imageUri:s.string().min(1),ecrRepositoryArn:s.string().min(1).optional(),taskDefinitionArn:s.string().min(1).optional(),previousTaskDefinitionArn:s.string().min(1).optional(),functionArn:s.string().min(1).optional(),publishedVersion:s.string().min(1).optional()}).strict(),oP=s.array(US);function LS(e,t){return`${e}${t}`}rP(LS,"artefactOutputKey");var iP=Object.defineProperty,FS=(e,t)=>iP(e,"name",{value:t,configurable:!0}),ft=["payload","nextjs","staticsite"],Cf=new Set(ft);function kf(e){return typeof e=="string"&&Cf.has(e)}FS(kf,"isPatternType");var _n={payload:{label:"Payload CMS",constructIdSuffix:"Payload",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!0},nextjs:{label:"Next.js",constructIdSuffix:"Nextjs",artefact:"opennext-lambda",stackPlacement:"compute",deployable:!1},staticsite:{label:"Static site",constructIdSuffix:"StaticSite",artefact:"static-assets",stackPlacement:"cdn",deployable:!0}},ZS=ft.filter(e=>_n[e].deployable),Of=ft.filter(e=>_n[e].artefact==="opennext-lambda"),aP=new Set(Of);function Df(e){return e!=null&&aP.has(e)}FS(Df,"isOpenNextPatternType");var Fo=["multipage","spa"];var sP=Object.defineProperty,wf=(e,t)=>sP(e,"name",{value:t,configurable:!0}),VS="noreply";function BS(e){return`${VS}@${e}`}wf(BS,"defaultFormsFromAddress");function GS(e){return`https://${e}`}wf(GS,"defaultFormsCorsOrigin");function Cs(e,t){let n=e.split("@");if(n.length!==2)return!1;let[o,r]=n;return o===void 0||o===""||r===void 0?!1:r.toLowerCase()===t.toLowerCase()}wf(Cs,"isAddressAtDomain");var WS=2;var cP=s.object({devDomain:s.string().min(1),hostedZoneId:s.string().min(1).optional(),parentDomain:s.string().min(1).optional(),parentDelegationRoleArn:s.string().min(1).optional()}).strict().superRefine((e,t)=>{if(e.hostedZoneId!==void 0){e.parentDomain!==void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDomain \u2014 the adopted zone was already delegated; omit parentDomain"}),e.parentDelegationRoleArn!==void 0&&t.addIssue({code:"custom",path:["parentDelegationRoleArn"],message:"hostedZoneId (adopt mode) is mutually exclusive with parentDelegationRoleArn \u2014 the adopted zone was already delegated; omit parentDelegationRoleArn"});return}e.parentDelegationRoleArn!==void 0&&e.parentDomain===void 0&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDelegationRoleArn requires parentDomain \u2014 set parentDomain to the parent zone the DelegationRole belongs to"}),e.parentDomain!==void 0&&!e.devDomain.endsWith(`.${e.parentDomain}`)&&t.addIssue({code:"custom",path:["parentDomain"],message:"parentDomain must be a proper DNS suffix of devDomain \u2014 devDomain must end with `.<parentDomain>`"})}),KS={appId:s.string().min(1),appKebab:s.string().min(1),engineVersion:s.string().min(1).optional(),adoptSlotEcr:s.boolean().optional(),phase:s.enum(["zone","full"]).optional(),domain:cP.optional()},uP=s.object(KS).strict(),lP=s.object({...KS,version:s.literal(WS),appName:s.string().min(1)}).strict().refine(e=>e.appName===`fjall-dev-${e.appKebab}`,{message:"appName must equal `fjall-dev-${appKebab}` (single-source identity)",path:["appName"]});var mP=Object.defineProperty,En=(e,t)=>mP(e,"name",{value:t,configurable:!0});function HS(e){return e.success===!0}En(HS,"isSuccess");function XS(e){return e.success===!1}En(XS,"isFailure");function R(e){return{success:!0,data:e}}En(R,"success");function N(e){return{success:!1,error:e}}En(N,"failure");async function YS(e){try{let t=await e();return R(t)}catch(t){return N(vr(t))}}En(YS,"tryAsync");function JS(e){try{let t=e();return R(t)}catch(t){return N(vr(t))}}En(JS,"trySync");var pP=Object.defineProperty,fP=(e,t)=>pP(e,"name",{value:t,configurable:!0}),qS=/^[a-zA-Z][a-zA-Z0-9-]*$/,gP=Uo.source.replace(/^\^|\$$/g,""),w=Object.freeze({IDENTIFIER:qS,NEW_APP_NAME:/^[a-z][a-z0-9-]*$/,RESOURCE_NAME:/^[a-zA-Z][a-zA-Z0-9]*$/,ECS_SERVICE_NAME:qS,BUCKET_NAME:/^[a-z][a-z0-9-]*[a-z0-9]$|^[a-z][a-z0-9]*$/,DATABASE_NAME:/^[a-zA-Z][a-zA-Z0-9_]*$/,RESOURCE_TYPE:/^[a-z]+(:[a-z]+)?$/,SSM_PATH:new RegExp(`^(?:/${gP})+$`),SECRET_NAME:Ns,SSM_COMPONENT:Uo,EMAIL:/^[^\s@]+@[^\s@]+\.[^\s@]+$/,DOCKER_IMAGE:/^[a-z0-9][a-z0-9._-]*[a-z0-9](:[a-z0-9._-]+)?$/,DOMAIN:/^[a-z0-9]([a-z0-9-]*[a-z0-9])?(\.[a-z0-9]([a-z0-9-]*[a-z0-9])?)+$/i,HTTP_ORIGIN:/^https?:\/\/[a-z0-9.-]+(:\d+)?$/i,PASCAL_CASE:/^[A-Z][A-Za-z0-9]*$/,AWS_ACCOUNT_ID:/^\d{12}$/,VPC_ID:/^vpc-[a-z0-9]+$/,ROLE_ARN:/^arn:aws[a-zA-Z-]*:iam::\d{12}:role\/.+$/,CIDR:/^((25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\.){3}(25[0-5]|2[0-4]\d|1\d\d|[1-9]?\d)\/(3[0-2]|[12]?\d)$/,SCHEDULE_EXPRESSION:/^(rate\(1 (?:minute|hour|day)\)|rate\((?:[2-9]|[1-9]\d+) (?:minutes|hours|days)\)|cron\([^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+ [^\s()]+\))$/,LAMBDA_RUNTIME_IDENTIFIER:/^[A-Za-z0-9._-]+$/,ENV_VAR_NAME:/^[A-Za-z_][A-Za-z0-9_]*$/});function zf(e){let t=/^rate\((\d+) (minute|minutes|hour|hours|day|days)\)$/.exec(e);if(!t)return;let n=t[1],o=t[2];if(n===void 0||o===void 0)return;let r=parseInt(n,10);if(!Number.isFinite(r)||r<1)return;let i=o==="minute"||o==="hour"||o==="day";if(!(i&&r!==1)&&!(!i&&r===1))return o==="minute"||o==="minutes"?{everyMs:r*6e4}:o==="hour"||o==="hours"?{everyMs:r*60*6e4}:{everyMs:r*24*60*6e4}}fP(zf,"parseRateExpression");var d=Object.freeze({IDENTIFIER:"Must start with a letter, contain only letters, numbers, and hyphens",NEW_APP_NAME:"Must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",IDENTIFIER_MIN_LENGTH:"Must be at least 2 characters",IDENTIFIER_NO_TRAILING_HYPHEN:"Must not end with a hyphen",IDENTIFIER_NO_CONSECUTIVE_HYPHENS:"Must not contain consecutive hyphens",RESOURCE_NAME:"Must start with a letter and contain only letters and numbers (PascalCase recommended)",ECS_SERVICE_NAME:"Service name must start with a letter and contain only letters, numbers, and hyphens",BUCKET_NAME:"Bucket name must start with a lowercase letter and contain only lowercase letters, numbers, and hyphens",DATABASE_NAME:"Database name must start with a letter and contain only letters, numbers, and underscores",RESOURCE_TYPE:"Resource type must be in format 'category' or 'category:type'",SSM_PATH:"SSM path must start with / and contain valid namespace segments (e.g., /myapp/ApiCluster/service)",SECRET_NAME:hf,SSM_COMPONENT:Rs,EMAIL:"Please enter a valid email address",DOMAIN:"Please enter a valid domain (e.g., cms.example.com)",DOCKER_IMAGE:"Invalid Docker image name format",REQUIRED:{APP_NAME:"Application name is required",RESOURCE_NAME:"Resource name is required",BUCKET_NAME:"Bucket name is required",SERVICE_NAME:"Service name is required",NETWORK_NAME:"Network name is required",DATABASE_NAME:"Database name is required",ORGANISATION_NAME:"Organisation name is required",EMAIL:"Email is required",NAME:"Name is required",USERNAME:"Username is required",CONTAINER_NAME:"Container name is required",GROUP:"Group is required",PATTERN_NAME:"Pattern name is required",SOURCE:"Source directory is required",BUILD_COMMAND:"Build command is required",OUTPUT_DIR:"Output directory is required",FORMS_TO:"Forms recipient address is required",ROUTING_PATH:"Routing path is required",RESOURCE_REFERENCE:"Resource reference is required",RESOURCE_TYPE:"Resource type is required",VARIANT:"Variant is required",SUBTYPE:"Subtype is required",DEPLOY_TARGET:"Deploy target is required",DESTROY_TARGET:"Destroy target is required"},MAX_LENGTH:{APP_NAME:"Application name must be 50 characters or less",RESOURCE_NAME:"Resource name must be 63 characters or less",BUCKET_NAME:"Bucket name must be 63 characters or less",SERVICE_NAME:"Service name must be 255 characters or less",NETWORK_NAME:"Network name must be 50 characters or less",DATABASE_NAME:"Database name must be 63 characters or less",ORGANISATION_NAME:"Organisation name must be 50 characters or less"},PORT:{INTEGER:"Port must be an integer",MIN:"Port must be at least 1",MAX:"Port cannot exceed 65535"},USERNAME:{MAX_LENGTH:"Username cannot exceed 63 characters"},LAMBDA:{MEMORY:{INTEGER:"Lambda memory must be an integer",MIN:"Memory must be at least 128 MB",MAX:"Memory cannot exceed 10240 MB",MULTIPLE:"Memory must be 128 MB or a multiple of 64 MB"},TIMEOUT:{INTEGER:"Timeout must be an integer",MIN:"Timeout must be at least 1 second",MAX:"Timeout cannot exceed 900 seconds"},RUNTIME:"Lambda runtime must contain only letters, digits, dots, underscores, or dashes (e.g. 'NODEJS_20_X' or 'nodejs20.x')"},ENV_VAR_NAME:"Environment variable names must start with a letter or underscore and contain only letters, digits, and underscores",PRIORITY:{INTEGER:"Priority must be an integer",MIN:"Priority must be at least 1",MAX:"Priority cannot exceed 50000"},CAPACITY:{MIN:{INTEGER:"Minimum capacity must be an integer",MIN_0:"Minimum capacity must be at least 0",MIN_1:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 100"},MAX:{INTEGER:"Maximum capacity must be an integer",MIN_0:"Maximum capacity must be at least 0",MIN_1:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 100"},DESIRED:{INTEGER:"Desired count must be an integer",MIN:"Desired count must be at least 0",MAX:"Desired count cannot exceed 100"},WARM_POOL_REQUIRED:"minCapacity 0 requires a warmPool \u2014 without it, new tasks wait 60-90s for a cold instance launch",WARM_POOL:{MIN_SIZE:{INTEGER:"Warm pool minSize must be an integer",MIN:"Warm pool minSize must be at least 0",MAX:"Warm pool minSize cannot exceed 100"},MIN_SIZE_EXCEEDS_MAX_CAPACITY:"warmPool.minSize cannot exceed maxCapacity \u2014 the warm pool cannot hold more instances than the ASG allows"}},MEMORY_LIMIT:{INTEGER:"Memory limit must be an integer",MIN_512:"Memory limit must be at least 512 MiB",MIN_128:"Memory limit must be at least 128 MiB",MAX:"Memory limit cannot exceed 30720 MiB"},DATABASE:{PORT:{INTEGER:"Database port must be an integer",MIN:"Database port must be at least 1024",MAX:"Database port cannot exceed 65535"},NAME:{REQUIRED:"Database name is required",MAX_LENGTH:"Database name must be 63 characters or less"}},BACKUP_RETENTION:{INTEGER:"Backup retention must be an integer",MIN:"Backup retention must be at least 1 day",MAX:"Backup retention cannot exceed 35 days"},SQS:{VISIBILITY_TIMEOUT:{INTEGER:"Visibility timeout must be an integer",MIN:"Visibility timeout must be at least 0 seconds",MAX:"Visibility timeout cannot exceed 43200 seconds (12 hours)"},RETENTION_PERIOD:{INTEGER:"Retention period must be an integer",MIN:"Retention period must be at least 60 seconds",MAX:"Retention period cannot exceed 1209600 seconds (14 days)"}},READER:{COUNT:{INTEGER:"Reader count must be an integer",MIN:"Reader count must be at least 0",MAX:"Reader count cannot exceed 15"}},IDENTIFIER_SUFFIX:{REQUIRED:"Identifier suffix is required when specified",MAX_LENGTH:"Identifier suffix cannot exceed 50 characters"},ROTATION:{INTEGER:"Rotation days must be an integer",MIN:"Rotation interval must be at least 1 day",MAX:"Rotation interval cannot exceed 365 days"},MAX_CONNECTIONS:{INTEGER:"Max connections must be an integer",MIN:"Max connections must be at least 1",MAX:"Max connections cannot exceed 100"},MONITORING_INTERVAL:{INTEGER:"Monitoring interval must be an integer",MIN:"Monitoring interval must be at least 0",MAX:"Monitoring interval cannot exceed 60 seconds",VALUES:"Monitoring interval must be 0, 1, 5, 10, 15, 30, or 60 seconds"},RETENTION_DAYS:{INTEGER:"Retention days must be an integer",MIN:"Retention days must be at least 1",MAX:"Retention days cannot exceed 365"},BATCH_SIZE:{INTEGER:"Batch size must be an integer",MIN:"Batch size must be at least 1",MAX:"Batch size cannot exceed 10000"},SERVICE:{UNIQUE_WITHIN_CLUSTER:"Service names must be unique within a cluster",MIN_REQUIRED:"At least one service is required",ROUTING_REQUIRED:"Multiple services with ports require routing config (path or host)"},PROXY_CONFIG:{MAX_IDLE_CONNECTIONS:{INTEGER:"Max idle connections must be an integer",MIN:"Max idle connections must be at least 0",MAX:"Max idle connections cannot exceed 100"},BORROW_TIMEOUT:{INTEGER:"Connection borrow timeout must be an integer",MIN:"Connection borrow timeout must be at least 1 second",MAX:"Connection borrow timeout cannot exceed 3600 seconds"}},MAX_AZS:{INTEGER:"Max AZs must be an integer",MIN:"Max AZs must be at least 1",MAX:"Max AZs cannot exceed 3"},BATCHING_WINDOW:{INTEGER:"Max batching window must be an integer",MIN:"Max batching window must be at least 0",MAX:"Max batching window cannot exceed 300 seconds"},HEALTH_CHECK:{INTERVAL:{INTEGER:"Health check interval must be an integer",MIN:"Health check interval must be at least 5 seconds",MAX:"Health check interval cannot exceed 300 seconds"},TIMEOUT:{INTEGER:"Health check timeout must be an integer",MIN:"Health check timeout must be at least 2 seconds",MAX:"Health check timeout cannot exceed 60 seconds"},RETRIES:{INTEGER:"Health check retries must be an integer",MIN:"Health check retries must be at least 1",MAX:"Health check retries cannot exceed 10"},START_PERIOD:{INTEGER:"Health check start period must be an integer",MIN:"Health check start period must be at least 0 seconds",MAX:"Health check start period cannot exceed 300 seconds"}},EPHEMERAL_STORAGE:{INTEGER:"Ephemeral storage size must be an integer",MIN:"Ephemeral storage size must be at least 512 MB",MAX:"Ephemeral storage size cannot exceed 10240 MB"},MAX_MESSAGE_SIZE:{INTEGER:"Max message size must be an integer",MIN:"Max message size must be at least 1024 bytes",MAX:"Max message size cannot exceed 262144 bytes (256 KB)"},CAPACITY_CONSTRAINT:{MIN_LTE_MAX:"minCapacity must be less than or equal to maxCapacity"},DIRECT_ACCESS:{NO_DOMAIN:"directAccess cannot be used with domain (no ALB for HTTPS)",NO_LOAD_BALANCER:"directAccess cannot be used with loadBalancer (mutually exclusive)"},GLOBAL_AURORA:{PRIMARY_REGION_REQUIRED:"primaryRegion is required for GlobalAurora databases"},NAT_GATEWAY:{INTEGER:"NAT gateway count must be an integer",MIN:"NAT gateway count must be at least 0",MAX:"NAT gateway count cannot exceed 3"},CIDR_MASK:{INTEGER:"CIDR mask must be an integer",MIN:"CIDR mask must be at least 16",MAX:"CIDR mask cannot exceed 28"},CPU:{INTEGER:"CPU must be an integer",MIN:"CPU must be at least 256 units",MAX:"CPU cannot exceed 4096 units"},KMS:{KEY_REQUIRED:"KMS key ARN is required when using KMS encryption"},READER_INSTANCES:{MAX:"Cannot have more than 15 reader instances",COUNT_OR_INSTANCES:"Cannot specify both 'count' and 'instances' - use one or the other"},GENERATOR_CAPACITY:{MIN:{MIN:"Minimum capacity must be at least 1",MAX:"Minimum capacity cannot exceed 1000"},MAX:{MIN:"Maximum capacity must be at least 1",MAX:"Maximum capacity cannot exceed 1000"}},INSTANCE_TYPE:"Unknown instance type. Common types include: t4g.micro, t4g.small, m5.large",ARCHITECTURE_MISMATCH:"Architecture mismatch between instance type and AMI",ALLOCATED_STORAGE:{INTEGER:"Allocated storage must be an integer",MIN:"Allocated storage must be at least 20 GB",MAX:"Allocated storage cannot exceed 65536 GB"},DLQ:{MAX_RECEIVE_COUNT:{INTEGER:"Max receive count must be an integer",MIN:"Max receive count must be at least 1",MAX:"Max receive count cannot exceed 1000"}},ALARM:{PERCENTAGE:{MIN:"Threshold must be at least 1%",MAX:"Threshold must be at most 100%"},FREE_STORAGE_GIB:{MIN:"Free storage threshold must be at least 1 GiB"}},REGION:"Invalid AWS region",PASCAL_CASE:"Resource name must start with an uppercase letter and contain only alphanumerics (PascalCase).",IMAGE_DOCKER_MUTEX:"image and docker are mutually exclusive",AWS_ACCOUNT_ID:"AWS account id must be exactly 12 digits (no hyphens)",VPC_ID:"VPC id must look like vpc-abc12345",ROLE_ARN:"Role ARN must have the form arn:aws:iam::<account-id>:role/<name>",CIDR:"CIDR must be in dotted-quad/prefix-length form (e.g. 10.0.0.0/16)",VPC_PEER:{MIN_REQUESTER_ACCOUNTS:"At least one requester account id is required",REGION_REQUIRED:"Peer region is required when specified",ROUTE_TABLE_ID_REQUIRED:"Route table id must not be empty"},SCHEDULE_EXPRESSION:"Schedule expression must be 'rate(N minute|minutes|hour|hours|day|days)' with N>=1, or 'cron(<6-field AWS expression>)'"});var vP=Object.defineProperty,Xe=(e,t)=>vP(e,"name",{value:t,configurable:!0}),hP=["us-east-2","us-west-2","us-east-1","eu-west-1","eu-central-1","ap-southeast-1"],yP=Object.freeze(hP.flatMap(e=>{let t=gn(e);return t?[t]:[]})),Mf=Object.freeze(["us-east-2","us-west-2","us-east-1","eu-west-1","ap-southeast-1"]);function ks(e){return e?e.split(",").map(t=>t.trim()).filter(Boolean):[]}Xe(ks,"parseRegionList");function jf(e){return Tt.includes(e)}Xe(jf,"isValidRegion");function Uf(e){return/^[a-z]{2}-[a-z]+-[1-9]$/.test(e)}Xe(Uf,"isValidRegionFormat");function Lf(e){if(!e)return Mf.slice(0,3);let t=e.toLowerCase().split("-"),n=t[0],o=t.length>1?t[1]:"",r=[];return n&&o&&(r=Tt.filter(i=>i.startsWith(`${n}-${o}`))),r.length===0&&n&&(r=Tt.filter(i=>i.startsWith(`${n}-`))),r.length>0?r.slice(0,3):Mf.slice(0,3)}Xe(Lf,"getSuggestions");function Ff(e){if(jf(e))return!0;let t=Lf(e);return Uf(e)?`Unknown region. Try: ${t.join(", ")}`:`Invalid format. Try: ${t.join(", ")}`}Xe(Ff,"validateRegion");function QS(e){if(!e||e.trim()==="")return!0;let t=ks(e);for(let n of t){let o=Ff(n);if(o!==!0)return o}return!0}Xe(QS,"validateRegionList");function Zf(e,t){return e.filter(n=>n!==t)}Xe(Zf,"filterDuplicateRegions");function Vf(e){return{label:e.city,value:e.code,description:e.optIn?`${e.code} \u2014 opt-in required`:e.code}}Xe(Vf,"toRegionOption");function e_(){return He.map(Vf)}Xe(e_,"getRegionOptions");function t_(e){return He.filter(t=>t.code!==e).map(Vf)}Xe(t_,"getRegionOptionsExcluding");function r_(e){let t=He.find(n=>n.code===e);return t?t.city:e}Xe(r_,"getRegionName");function n_(e){return t=>{let n=ks(t);return Zf(n,e)}}Xe(n_,"createRegionFormatter");var Os="3.2.1";var Ds=["Aurora","Instance","GlobalAurora","ClickHouse"],An=["FARGATE","FARGATE_SPOT","EC2"],st=["standard","resilient","enterprise"],ws=["tinkerer","lightweight","standard","resilient","enterprise"],Bf="custom",Zo=[...ws,Bf];var bP=Object.defineProperty,SP=(e,t)=>bP(e,"name",{value:t,configurable:!0}),lj=Object.freeze({RESOURCE_SUFFIXES:Object.freeze({storage:"Storage",database:"Database",cluster:"Cluster",function:"Function",instance:"Instance",compute:"Compute"})}),Vo=["ecs","lambda","ec2"],$n=Object.freeze({ECS:"ecs",LAMBDA:"lambda",EC2:"ec2"}),zs=["code","container"],Bo=Object.freeze({CODE:"code",CONTAINER:"container"}),Ms=["ARM_64","X86_64"],o_="ARM_64",Go=["NONE","AWS_IAM"],js=["public","internal"],Us=["CPU","MEMORY"],Ls=["ARM","STANDARD"],Gf=["Instance","Aurora"],xn=["postgresql","mysql"],i_=["foundation","compliance","hardened"];var Fs=["t3.nano","t3.micro","t3.small","t3.medium","t3.large","t3.xlarge","t3.2xlarge","t3a.nano","t3a.micro","t3a.small","t3a.medium","t3a.large","t3a.xlarge","t3a.2xlarge","t4g.nano","t4g.micro","t4g.small","t4g.medium","t4g.large","t4g.xlarge","t4g.2xlarge","c5.large","c5.xlarge","c5.2xlarge","c5.4xlarge","c5.9xlarge","c5.12xlarge","c5.18xlarge","c5.24xlarge","c5a.large","c5a.xlarge","c5a.2xlarge","c5a.4xlarge","c5a.8xlarge","c5a.12xlarge","c5a.16xlarge","c5a.24xlarge","c6g.medium","c6g.large","c6g.xlarge","c6g.2xlarge","c6g.4xlarge","c6g.8xlarge","c6g.12xlarge","c6g.16xlarge","r5.large","r5.xlarge","r5.2xlarge","r5.4xlarge","r5.8xlarge","r5.12xlarge","r5.16xlarge","r5.24xlarge","r5a.large","r5a.xlarge","r5a.2xlarge","r5a.4xlarge","r5a.8xlarge","r5a.12xlarge","r5a.16xlarge","r5a.24xlarge","r6g.medium","r6g.large","r6g.xlarge","r6g.2xlarge","r6g.4xlarge","r6g.8xlarge","r6g.12xlarge","r6g.16xlarge","i3.large","i3.xlarge","i3.2xlarge","i3.4xlarge","i3.8xlarge","i3.16xlarge","p3.2xlarge","p3.8xlarge","p3.16xlarge","g4dn.xlarge","g4dn.2xlarge","g4dn.4xlarge","g4dn.8xlarge","g4dn.12xlarge","g4dn.16xlarge","m5.large","m5.xlarge","m5.2xlarge","m5.4xlarge","m5.8xlarge","m5.12xlarge","m5.16xlarge","m5.24xlarge","m5a.large","m5a.xlarge","m5a.2xlarge","m5a.4xlarge","m5a.8xlarge","m5a.12xlarge","m5a.16xlarge","m5a.24xlarge"],a_=[0,1,5,10,15,30,60];function Ye(e,t){return e.includes(t)}SP(Ye,"constIncludes");var s_=1,c_=65535,gj=Object.freeze({postgresql:5432,mysql:3306}),u_=128,l_=10240,Zs=1,Vs=900,Wf=1,Kf=1e3,In=100,d_=100;var m_=3e3;var p_=["GET","POST","PUT","DELETE","HEAD","OPTIONS","PATCH"],f_=["standard","assets","upload","website"],Tn=["AES256","KMS"];var _P=Object.defineProperty,Wo=(e,t)=>_P(e,"name",{value:t,configurable:!0}),we=Wo(e=>s.union([s.literal(!1),e]),"optionalOrDisabled"),yr={check:Wo(e=>e.minCapacity!==void 0&&e.maxCapacity!==void 0?e.minCapacity<=e.maxCapacity:!0,"check"),params:{message:d.CAPACITY_CONSTRAINT.MIN_LTE_MAX,path:["maxCapacity"]}},Ko=Wo(e=>s.number().int(d.MEMORY_LIMIT.INTEGER).min(e,e===128?d.MEMORY_LIMIT.MIN_128:d.MEMORY_LIMIT.MIN_512).max(30720,d.MEMORY_LIMIT.MAX),"memoryLimitMiBSchema"),U=s.string().min(1,d.REQUIRED.RESOURCE_NAME).max(63,d.MAX_LENGTH.RESOURCE_NAME).regex(w.RESOURCE_NAME,d.RESOURCE_NAME),v_=s.string().min(1,d.REQUIRED.BUCKET_NAME).max(63,d.MAX_LENGTH.BUCKET_NAME).regex(w.BUCKET_NAME,d.BUCKET_NAME),h_=s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(w.DATABASE_NAME,d.DATABASE_NAME);function Bs(e,t=w.IDENTIFIER,n=d.IDENTIFIER){return s.string().min(2,d.IDENTIFIER_MIN_LENGTH).max(50,e).regex(t,n).refine(o=>!o.endsWith("-"),{message:d.IDENTIFIER_NO_TRAILING_HYPHEN}).refine(o=>!o.includes("--"),{message:d.IDENTIFIER_NO_CONSECUTIVE_HYPHENS})}Wo(Bs,"identifierSchema");var le=Bs(d.MAX_LENGTH.APP_NAME),Ej=Bs(d.MAX_LENGTH.APP_NAME,w.NEW_APP_NAME,d.NEW_APP_NAME),br=s.number().int(d.PORT.INTEGER).min(s_,d.PORT.MIN).max(c_,d.PORT.MAX),be=s.object({key:s.string(),sourceText:s.string()}).strict(),EP=s.object({__identifier:s.string()}).strict(),AP=s.object({__expression:s.string()}).strict(),$P=s.object({__call:s.string()}).strict(),xP=s.union([EP,AP,$P]),IP=s.union([s.string(),s.number(),s.boolean(),xP]),Nn=s.record(s.string().regex(w.ENV_VAR_NAME,d.ENV_VAR_NAME),IP),TP=s.object({id:s.string(),name:s.string().optional(),arn:s.string().optional(),field:s.string().optional()}).strict().refine(e=>e.name!==void 0!=(e.arn!==void 0),{message:"secretsImport requires exactly one of `name` or `arn`."}),y_=s.record(s.string(),TP),Aj=s.record(s.string(),s.unknown()),Hf=s.enum(Zo).describe(`Application type must be one of: ${Zo.join(", ")}`),Xf=s.enum(ft).describe(`OpenNext deployment pattern: ${ft.join(", ")}`),NP=s.enum(["before-imports","after-imports","after-app-init","after-tags","after-resource","end-of-file"]),RP=s.enum(["import","app-init","tags","database","compute","storage","network","messaging","cdn","pattern","vpc-peer","vpc-peer-accepter","cross-plan-connection","custom"]),b_=s.object({sourceText:s.string(),position:NP,afterManagedResource:s.object({type:RP,name:s.string().optional()}).strict().optional(),originalLine:s.number().int().optional(),leadingComments:s.array(s.string()).optional(),orphaned:s.boolean().optional(),orphanedComment:s.string().optional()}).strict(),S_=s.union([s.object({tier:s.enum(st)}).strict(),s.literal(!1)]),__=s.union([s.object({instanceType:s.string().optional()}).strict(),s.literal(!1)]),PP=Bs(d.MAX_LENGTH.ORGANISATION_NAME),CP=s.string().regex(w.EMAIL,d.EMAIL),g_=s.string().refine(e=>Tt.includes(e),{message:d.REGION}),$j=s.object({name:PP,email:CP,accountName:s.string().optional(),primaryRegion:g_.optional().default(fn),secondaryRegions:s.array(g_).optional(),security:s.enum(i_).optional(),force:s.boolean().optional()}).strict();function Ho(e){return e.issues.map(t=>`${t.path.length>0?`${t.path.join(".")}: `:""}${t.message}`).join(`
122
122
  `)}Wo(Ho,"getZodErrorMessage");var Rn=s.number().min(1,d.ALARM.PERCENTAGE.MIN).max(100,d.ALARM.PERCENTAGE.MAX),kP=s.number().min(1,d.ALARM.FREE_STORAGE_GIB.MIN),E_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),memoryThreshold:Rn.optional(),runningTasksMinimum:s.number().int().min(0).optional(),http5xxThreshold:Rn.optional()}).strict()]),A_=s.union([s.literal(!1),s.object({cpuThreshold:Rn.optional(),freeStorageThresholdGiB:kP.optional(),connectionsThreshold:s.number().int().min(1).optional()}).strict()]),$_=s.union([s.literal(!1),s.object({errorRateThreshold:Rn.optional(),durationThresholdPercent:Rn.optional()}).strict()]);var Rt=s.number().int(d.BACKUP_RETENTION.INTEGER).min(1,d.BACKUP_RETENTION.MIN).max(35,d.BACKUP_RETENTION.MAX),Xo=s.number().int(d.MONITORING_INTERVAL.INTEGER).refine(e=>Ye(a_,e),{message:d.MONITORING_INTERVAL.VALUES}),Ws=s.number().int(d.DATABASE.PORT.INTEGER).min(1024,d.DATABASE.PORT.MIN).max(65535,d.DATABASE.PORT.MAX),OP=s.enum(Ds).describe(`Database type must be one of: ${Ds.join(", ")}`),DP=s.object({maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional()}).strict().describe("RDS Proxy configuration"),wP=s.object({instanceType:s.string().optional(),availabilityZone:s.string().optional()}).strict().describe("Read replica configuration"),zP=s.object({automaticallyAfterDays:s.number().int(d.ROTATION.INTEGER).min(1,d.ROTATION.MIN).max(365,d.ROTATION.MAX).optional()}).strict().describe("Secret rotation configuration"),Ks=s.object({username:s.string().min(1,d.REQUIRED.USERNAME).max(63,d.USERNAME.MAX_LENGTH).optional(),secretRotation:zP.optional()}).strict().describe("Database credentials configuration"),Hs=we(DP),Xs=we(wP),MP=s.object({scaleWithWriter:s.boolean().optional(),enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for a single Aurora reader instance"),Yo=s.object({enableDatabaseInsights:s.boolean().optional(),identifierSuffix:s.string().min(1,d.IDENTIFIER_SUFFIX.REQUIRED).max(50,d.IDENTIFIER_SUFFIX.MAX_LENGTH).optional(),availabilityZone:s.string().optional()}).strict().describe("Configuration for Aurora writer instance"),jP=s.object({count:s.number().int(d.READER.COUNT.INTEGER).min(0,d.READER.COUNT.MIN).max(15,d.READER.COUNT.MAX).optional(),instances:s.array(MP).max(15,d.READER_INSTANCES.MAX).optional(),defaultEnableDatabaseInsights:s.boolean().optional()}).strict().refine(e=>!(e.count!==void 0&&e.instances!==void 0),{message:d.READER_INSTANCES.COUNT_OR_INSTANCES,path:["count"]}).describe("Aurora readers configuration"),Jo=we(jP),UP=s.object({awsManaged:s.literal(!0)}).strict(),LP=s.object({useCMK:s.literal(!0)}).strict(),x_=s.union([UP,LP]),FP=s.object({mode:s.enum(["standard","advanced"]).optional(),encryptionKey:x_.optional()}).strict().describe("Database Insights configuration"),Ys=we(FP),Js=s.object({storageKey:x_.optional()}).strict().describe("Encryption configuration (DESTRUCTIVE to change storageKey)"),I_=s.object({name:U,type:OP,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),instanceType:s.string().optional(),allocatedStorage:s.number().optional(),multiAz:s.boolean().optional(),publiclyAccessible:s.boolean().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),deletionProtection:s.boolean().optional(),proxy:Hs.optional(),credentials:Ks.optional(),readReplica:Xs.optional(),encryption:Js.optional(),writer:Yo.optional(),readers:Jo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Xo.optional(),primaryRegion:s.string().optional(),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional(),databaseEngine:s.enum(xn).optional(),engineExpression:s.string().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional(),alarms:A_.optional()}).strict(),qs=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(w.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional(),databaseInsights:Ys.optional(),port:Ws.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),deletionProtection:s.boolean().optional()}).strict(),T_={databaseType:s.literal("Instance"),instanceType:s.string().optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),publiclyAccessible:s.boolean().optional(),backupRetention:Rt.optional(),allocatedStorage:s.number().optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},N_={databaseType:s.literal("Aurora"),writer:Yo.optional(),readers:Jo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Xo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},R_={databaseType:s.literal("GlobalAurora"),primaryRegion:s.string().min(1,d.GLOBAL_AURORA.PRIMARY_REGION_REQUIRED),secondaryRegions:s.array(s.string()).optional(),globalClusterIdentifier:s.string().optional(),enableGlobalWriteForwarding:s.boolean().optional(),writer:Yo.optional(),readers:Jo.optional(),backupRetention:Rt.optional(),preferredMaintenanceWindow:s.string().optional(),monitoringInterval:Xo.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()},P_=s.object({appName:le,nameProvidedByFlag:s.boolean().optional(),databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME).max(63,d.MAX_LENGTH.DATABASE_NAME).regex(w.DATABASE_NAME,d.DATABASE_NAME),resourceName:U.optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict(),C_={databaseType:s.literal("ClickHouse"),instanceType:s.string().optional(),coldTier:s.union([s.object({mode:s.literal("s3")}).strict(),s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional()},ZP=qs.extend(T_).strict(),VP=qs.extend(N_).strict(),BP=qs.extend(R_).strict(),GP=P_.extend(C_).strict(),Dj=s.discriminatedUnion("databaseType",[ZP,VP,BP,GP]),Yf=qs.extend({resourceName:U}).strict(),WP=Yf.extend(T_).strict(),KP=Yf.extend(N_).strict(),HP=Yf.extend(R_).strict(),XP=P_.extend({resourceName:U}).strict(),YP=XP.extend(C_).strict(),wj=s.discriminatedUnion("databaseType",[WP,KP,HP,YP]),zj=s.object({appName:le,databaseName:s.string().min(1,d.REQUIRED.DATABASE_NAME),maxConnections:s.number().int(d.MAX_CONNECTIONS.INTEGER).min(1,d.MAX_CONNECTIONS.MIN).max(100,d.MAX_CONNECTIONS.MAX).optional(),maxIdleConnections:s.number().int(d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.INTEGER).min(0,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MIN).max(100,d.PROXY_CONFIG.MAX_IDLE_CONNECTIONS.MAX).optional(),connectionBorrowTimeout:s.number().int(d.PROXY_CONFIG.BORROW_TIMEOUT.INTEGER).min(1,d.PROXY_CONFIG.BORROW_TIMEOUT.MIN).max(3600,d.PROXY_CONFIG.BORROW_TIMEOUT.MAX).optional(),requireTLS:s.boolean().optional(),nameProvidedByFlag:s.boolean().optional()}).strict(),JP=["S","N","B"],Gs=s.object({name:s.string(),type:s.enum(JP)}).strict(),k_=s.object({name:U,partitionKey:Gs,sortKey:Gs.optional(),globalSecondaryIndexes:s.array(s.object({indexName:s.string(),partitionKey:Gs,sortKey:Gs.optional()}).strict()).optional(),ttlAttribute:s.string().optional(),stream:s.boolean().optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict(),qP=s.object({mode:s.literal("s3")}).strict(),O_=s.object({name:U,type:s.literal("ClickHouse"),databaseName:h_,instanceType:s.string().optional(),coldTier:s.union([qP,s.literal(!1)]).optional(),optimiseSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupSchedule:s.union([s.string(),s.literal(!1)]).optional(),backupRetentionDays:Rt.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var QP=s.object({count:s.number().int(d.NAT_GATEWAY.INTEGER).min(0,d.NAT_GATEWAY.MIN).max(3,d.NAT_GATEWAY.MAX).optional()}).strict().describe("NAT gateway configuration"),D_=we(QP),Jf=s.enum(["cloudwatch","s3"]),eC=s.object({destination:Jf.optional(),retentionDays:s.number().int(d.RETENTION_DAYS.INTEGER).min(1,d.RETENTION_DAYS.MIN).max(365,d.RETENTION_DAYS.MAX).optional(),trafficType:s.enum(["ALL","ACCEPT","REJECT"]).optional()}).strict().describe("VPC flow log configuration"),w_=we(eC),tC=s.object({s3:s.boolean().optional(),dynamodb:s.boolean().optional()}).strict().describe("Gateway VPC endpoints (FREE)"),rC=we(tC),nC=s.object({ecr:s.boolean().optional(),secretsManager:s.boolean().optional(),kms:s.boolean().optional(),cloudwatchLogs:s.boolean().optional(),ssm:s.boolean().optional(),sts:s.boolean().optional()}).strict().describe("Interface VPC endpoints (cost per hour)"),oC=we(nC),iC=s.object({gateway:rC.optional(),interface:oC.optional()}).strict().describe("VPC endpoints configuration"),z_=we(iC),Qs=s.object({maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:D_.optional(),flowLogs:w_.optional(),vpcEndpoints:z_.optional(),cidrMask:s.number().int(d.CIDR_MASK.INTEGER).min(16,d.CIDR_MASK.MIN).max(28,d.CIDR_MASK.MAX).optional()}).strict(),M_=s.string().min(1,d.REQUIRED.NETWORK_NAME).max(50,d.MAX_LENGTH.NETWORK_NAME).regex(w.RESOURCE_NAME,d.RESOURCE_NAME),j_=Qs.extend({name:M_}).strict(),U_=we(Qs),Fj=s.object({appName:le,networkName:M_.optional(),maxAzs:s.number().int(d.MAX_AZS.INTEGER).min(1,d.MAX_AZS.MIN).max(3,d.MAX_AZS.MAX).optional(),natGateways:D_.optional(),flowLogs:w_.optional(),vpcEndpoints:z_.optional()}).strict(),aC=w.CIDR,qf=s.string().regex(aC,d.CIDR),sC=s.object({kind:s.literal("database"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),name:U,allowedFromCidrs:s.array(qf),access:s.enum(["read","write","readWrite"]).optional()}).strict(),cC=s.object({kind:s.literal("ecsService"),resource:s.string().min(1,d.REQUIRED.RESOURCE_REFERENCE),serviceName:s.string().min(1,d.REQUIRED.SERVICE_NAME),name:U,allowedFromCidrs:s.array(qf),port:br.optional()}).strict(),uC=s.discriminatedUnion("kind",[sC,cC]),Zj=s.object({name:U,peerAppName:s.string().min(1,d.REQUIRED.APP_NAME),peerAccountId:s.string().regex(w.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID),peerRegion:s.string().min(1,d.VPC_PEER.REGION_REQUIRED).optional(),peerVpcId:s.string().regex(w.VPC_ID,d.VPC_ID).optional(),peerVpcCidr:qf.optional(),peerRoleArn:s.string().regex(w.ROLE_ARN,d.ROLE_ARN).optional(),peerRouteTableIds:s.array(s.string().min(1,d.VPC_PEER.ROUTE_TABLE_ID_REQUIRED)).optional(),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),enableDnsResolution:s.boolean().optional()}).strict(),Vj=s.object({name:U,requesterAccountIds:s.array(s.string().regex(w.AWS_ACCOUNT_ID,d.AWS_ACCOUNT_ID)).min(1,d.VPC_PEER.MIN_REQUESTER_ACCOUNTS),localVpcName:s.string().min(1,d.REQUIRED.NETWORK_NAME).optional(),publishToSsm:s.boolean().optional(),exposedResources:s.array(uC).optional()}).strict();var ec=["storage","cdn","compute"],lC=s.object({sid:s.string().optional(),effect:s.enum(["Allow","Deny"]),principals:s.array(s.string()),actions:s.array(s.string()),resources:s.array(s.string()).optional(),conditions:s.record(s.string(),s.record(s.string(),s.union([s.string(),s.array(s.string())]))).optional()}).strict(),L_=s.object({name:U,bucketName:s.string().optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(st).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),deployment:s.object({source:s.string(),prune:s.boolean().optional(),cacheControl:s.object({maxAge:s.number().optional(),immutable:s.boolean().optional()}).strict().optional()}).strict().optional(),retain:s.boolean().optional(),resourcePolicyStatements:s.array(lC).optional(),stackPlacement:s.enum(ec).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED}),Xj=s.object({appName:le,bucketName:v_,nameProvidedByFlag:s.boolean().optional(),storagePreset:s.enum(f_).optional(),publicReadAccess:s.boolean().optional(),websiteHosting:s.object({indexDocument:s.string(),errorDocument:s.string().optional()}).strict().optional(),backupVaultTier:s.enum(st).optional(),versioned:s.boolean().optional(),encryption:s.enum(Tn).optional(),kmsKeyArn:s.string().optional(),cors:s.array(s.object({allowedOrigins:s.array(s.string()),allowedMethods:s.array(s.string()),allowedHeaders:s.array(s.string()).optional(),exposedHeaders:s.array(s.string()).optional(),maxAge:s.number().optional()}).strict()).optional(),connectionConfig:s.object({connectToCompute:s.array(s.string()).optional(),connectToServices:s.array(s.string()).optional()}).strict().optional()}).strict().refine(e=>e.encryption!=="KMS"||!!e.kmsKeyArn,{message:d.KMS.KEY_REQUIRED,path:["kmsKeyArn"]});var Qf=s.enum(["DESTROY","RETAIN"]),F_=s.object({name:U,queueType:s.enum(["standard","fifo"]).default("standard"),visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),retentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),contentBasedDeduplication:s.boolean().optional(),removalPolicy:Qf.optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict();var Z_=s.object({type:s.literal("basic-auth"),username:s.string().min(1),password:s.string().min(1)}).strict(),V_=s.object({name:U,defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Z_]).optional(),extraProperties:s.array(be).optional()}).strict(),nU=s.object({appName:s.string(),name:U.optional(),defaultOriginRef:s.string(),behaviours:s.array(s.object({pathPattern:s.string(),originRef:s.string(),cachePolicy:s.enum(["CACHING_OPTIMIZED","CACHING_DISABLED"]).optional()}).strict()).optional(),customDomain:s.string().optional(),certificateArn:s.string().optional(),accessGate:s.union([s.literal(!1),Z_]).optional(),nameProvidedByFlag:s.boolean().optional()}).strict();var dC=Object.defineProperty,eg=(e,t)=>dC(e,"name",{value:t,configurable:!0}),mC=new Set(["t4g","c6g","c6gd","c6gn","c7g","c7gd","c7gn","r6g","r6gd","r7g","r7gd","m6g","m6gd","m7g","m7gd","a1","x2gd","im4gn","is4gen","i4g","hpc7g"]);function Pn(e){let t=e.split(".")[0]??"";return mC.has(t)?"ARM":"STANDARD"}eg(Pn,"getArchitectureForInstanceType");function tc(e,t){let n=Pn(e);return n!==t?{valid:!1,message:`Instance type '${e}' requires ${n} architecture, but '${t}' AMI was specified. Use a ${n==="ARM"?"Graviton instance (t4g, c6g, r6g, m6g, etc.)":"Intel/AMD instance (t3, c5, r5, m5, etc.)"} instead.`}:{valid:!0}}eg(tc,"validateArchitectureMatch");function B_(e,t){return Pn(e)===t}eg(B_,"isArchitectureCompatible");var pC=Object.defineProperty,rc=(e,t)=>pC(e,"name",{value:t,configurable:!0});var fC=1,gC=/^[A-Za-z0-9_.-]+$/,vC=s.object({id:s.string().min(1,"buildSecret id cannot be empty").regex(gC,"buildSecret id may contain only letters, digits, '_', '.', and '-' (no comma, '=', or whitespace, which would break the buildx --secret argv)"),ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildSecret requires exactly one source (ssm, secretsManager, or env)"})}),hC=s.union([s.string(),s.object({ssm:s.string().min(1,"ssm parameter name cannot be empty").optional(),secretsManager:s.object({name:s.string().min(1,"secret name cannot be empty").optional(),arn:s.string().min(1,"secret arn cannot be empty").optional(),field:s.string().min(1,"secret field cannot be empty").optional()}).strict().refine(e=>e.name===void 0!=(e.arn===void 0),"secretsManager requires exactly one of name or arn").optional(),env:s.string().min(1,"env variable name cannot be empty").optional(),acknowledgePublic:s.boolean().optional()}).strict().superRefine((e,t)=>{[e.ssm,e.secretsManager,e.env].filter(n=>n!==void 0).length!==1&&t.addIssue({code:s.ZodIssueCode.custom,message:"buildArg value requires exactly one source (ssm, secretsManager, or env)"})})]),gt=s.object({path:s.string(),context:s.string().min(1,"context cannot be empty").optional(),target:s.string().min(1,"target cannot be empty").optional(),buildArgs:s.record(s.string(),hC).optional(),buildSecrets:s.array(vC).optional()}).strict(),cU=gt.partial();function yC(e,t){if(t===void 0)return e;let n=t.context??e.context,o=t.target??e.target,r=t.buildArgs??e.buildArgs,i=t.buildSecrets??e.buildSecrets;return{path:t.path??e.path,...n!==void 0&&{context:n},...o!==void 0&&{target:o},...r!==void 0&&{buildArgs:r},...i!==void 0&&{buildSecrets:i}}}rc(yC,"mergeDockerBuild");function tg(e){return typeof e=="object"&&e!==null&&!Array.isArray(e)}rc(tg,"isRecord");function G_(e){if(!tg(e)||typeof e.path!="string"||e.path.length===0)return;let t=typeof e.context=="string"&&e.context.length>0?e.context:void 0,n=typeof e.target=="string"&&e.target.length>0?e.target:void 0,o=tg(e.buildArgs)&&Object.keys(e.buildArgs).length>0?e.buildArgs:void 0,r=Array.isArray(e.buildSecrets)&&e.buildSecrets.length>0?e.buildSecrets:void 0,i={path:e.path,...t!==void 0&&{context:t},...n!==void 0&&{target:n},...o!==void 0&&{buildArgs:o},...r!==void 0&&{buildSecrets:r}},a=gt.safeParse(i);return a.success?a.data:void 0}rc(G_,"normaliseDockerBuild");function bC(e){if(e===void 0)return;let t=G_(e);return t===void 0?void 0:JSON.stringify(t)}rc(bC,"dockerBuildFingerprint");var SC=s.object({name:s.string(),clusterName:s.string().optional(),docker:gt.optional(),containerPort:s.number().optional(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional()}).strict(),_C=s.object({type:s.enum(ft),name:s.string(),source:s.string()}).strict(),EC=s.object({repositoryName:s.string()}).strict(),AC=s.object({name:s.string(),secrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),importedSecretNames:s.array(s.string()).optional(),docker:gt.optional(),imageKey:s.string().optional()}).strict(),$C=s.object({templateHash:s.string(),synthTimestamp:s.string()}).strict(),xC=s.object({constructPath:s.string().max(512),group:s.string().max(128),resourceType:s.string().max(256)}).strict(),uU=s.object({version:s.literal(fC),generatedAt:s.string(),appName:s.string(),services:s.array(SC),lambdas:s.array(AC),pattern:_C.optional(),ecr:EC.optional(),stacks:s.record(s.string(),$C),resourceMap:s.record(s.string(),xC).optional()}).strict();var IC=Object.defineProperty,TC=(e,t)=>IC(e,"name",{value:t,configurable:!0});function K_(e){return!(e.image!==void 0&&e.docker!==void 0)}TC(K_,"imageDockerMutexCheck");var H_=s.number().int(d.CAPACITY.MIN.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MIN.MIN).max(Kf,d.GENERATOR_CAPACITY.MIN.MAX),X_=s.number().int(d.CAPACITY.MAX.INTEGER).min(Wf,d.GENERATOR_CAPACITY.MAX.MIN).max(Kf,d.GENERATOR_CAPACITY.MAX.MAX),Cn=s.number().int(d.LAMBDA.MEMORY.INTEGER).min(u_,d.LAMBDA.MEMORY.MIN).max(l_,d.LAMBDA.MEMORY.MAX).refine(e=>e===128||e%64===0,d.LAMBDA.MEMORY.MULTIPLE),Y_=s.string().regex(w.LAMBDA_RUNTIME_IDENTIFIER,d.LAMBDA.RUNTIME),rg=s.number().int(d.CPU.INTEGER).min(256,d.CPU.MIN).max(4096,d.CPU.MAX),oc=s.number().int(d.CAPACITY.DESIRED.INTEGER).min(0,d.CAPACITY.DESIRED.MIN).max(In,d.CAPACITY.DESIRED.MAX),qo=s.object({connectToDatabase:s.array(s.string()).optional()}).strict(),NC=s.object({minSize:s.number().int(d.CAPACITY.WARM_POOL.MIN_SIZE.INTEGER).min(0,d.CAPACITY.WARM_POOL.MIN_SIZE.MIN).max(d_,d.CAPACITY.WARM_POOL.MIN_SIZE.MAX).optional(),reuseOnScaleIn:s.boolean().optional()}).strict(),ng=s.object({instanceType:s.string().optional(),amiHardwareType:s.enum(Ls).optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),memoryLimitMiB:Ko(128).optional(),warmPool:NC.optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(!e.instanceType||!e.amiHardwareType)return;let n=tc(e.instanceType,e.amiHardwareType);n.valid||t.addIssue({code:"custom",message:n.message??d.ARCHITECTURE_MISMATCH,path:["instanceType"]})}).superRefine((e,t)=>{e.minCapacity===0&&!e.warmPool&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL_REQUIRED,path:["minCapacity"]}),e.warmPool?.minSize!==void 0&&e.maxCapacity!==void 0&&e.warmPool.minSize>e.maxCapacity&&t.addIssue({code:"custom",message:d.CAPACITY.WARM_POOL.MIN_SIZE_EXCEEDS_MAX_CAPACITY,path:["warmPool","minSize"]})}),RC=s.enum(Vo).describe(`Compute type must be one of: ${Vo.join(", ")}`),og=s.enum(An).describe(`ECS capacity provider must be one of: ${An.join(", ")}`),ig=s.string().refine(e=>Ye(Fs,e),{message:d.INSTANCE_TYPE}),J_=s.object({sourceType:s.enum(["sqs","dynamodb","eventbridge"]),sourceRef:s.string().describe("Name of the source resource"),batchSize:s.number().int(d.BATCH_SIZE.INTEGER).min(1,d.BATCH_SIZE.MIN).max(1e4,d.BATCH_SIZE.MAX).optional(),startingPosition:s.enum(["TRIM_HORIZON","LATEST"]).optional(),maxBatchingWindow:s.number().int(d.BATCHING_WINDOW.INTEGER).min(0,d.BATCHING_WINDOW.MIN).max(300,d.BATCHING_WINDOW.MAX).optional(),reportBatchItemFailures:s.boolean().optional()}).strict(),PC=s.object({name:s.string().min(1,d.REQUIRED.CONTAINER_NAME).optional(),image:s.string().optional(),port:br.optional(),environment:Nn.optional(),secretsImport:y_.optional(),command:s.array(s.string()).optional(),entryPoint:s.array(s.string()).optional(),essential:s.boolean().optional(),healthCheck:s.object({command:s.array(s.string()),interval:s.number().int(d.HEALTH_CHECK.INTERVAL.INTEGER).min(5,d.HEALTH_CHECK.INTERVAL.MIN).max(300,d.HEALTH_CHECK.INTERVAL.MAX).optional(),timeout:s.number().int(d.HEALTH_CHECK.TIMEOUT.INTEGER).min(2,d.HEALTH_CHECK.TIMEOUT.MIN).max(60,d.HEALTH_CHECK.TIMEOUT.MAX).optional(),retries:s.number().int(d.HEALTH_CHECK.RETRIES.INTEGER).min(1,d.HEALTH_CHECK.RETRIES.MIN).max(10,d.HEALTH_CHECK.RETRIES.MAX).optional(),startPeriod:s.number().int(d.HEALTH_CHECK.START_PERIOD.INTEGER).min(0,d.HEALTH_CHECK.START_PERIOD.MIN).max(300,d.HEALTH_CHECK.START_PERIOD.MAX).optional()}).strict().optional(),ssmSecrets:s.array(s.string().regex(w.SECRET_NAME,d.SECRET_NAME)).optional(),extraProperties:s.array(be).optional()}).strict(),q_=s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(w.ECS_SERVICE_NAME,d.ECS_SERVICE_NAME),Q_=s.object({domain:s.string().optional(),loadBalancer:s.union([s.literal(!1),s.enum(js)]).optional(),directAccess:s.boolean().optional(),extraProperties:s.array(be).optional()}).strict().refine(e=>!(e.directAccess&&e.domain),{message:d.DIRECT_ACCESS.NO_DOMAIN,path:["directAccess"]}).refine(e=>!(e.directAccess&&typeof e.loadBalancer=="string"),{message:d.DIRECT_ACCESS.NO_LOAD_BALANCER}).describe("Cluster-level configuration"),nc=s.object({path:s.string().optional(),host:s.string().optional(),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional(),healthCheckPath:s.string().optional()}).strict().describe("Path/host-based routing configuration"),CC=s.object({desiredCount:oc.optional(),minCapacity:s.number().int(d.CAPACITY.MIN.INTEGER).min(0,d.CAPACITY.MIN.MIN_0).max(In,d.CAPACITY.MIN.MAX).optional(),maxCapacity:s.number().int(d.CAPACITY.MAX.INTEGER).min(1,d.CAPACITY.MAX.MIN_1).max(In,d.CAPACITY.MAX.MAX).optional(),scalingType:s.enum(Us).optional()}).strict().refine(yr.check,yr.params).describe("ECS service scaling configuration"),eE=s.object({name:q_,docker:gt.optional(),needsDatabaseConnection:s.boolean().optional(),needsStorageConnection:s.boolean().optional(),needsMessagingConnection:s.boolean().optional(),image:s.string().optional(),containers:s.array(PC).optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),cpu:rg.optional(),memoryLimitMiB:Ko(512).optional(),desiredCount:oc.optional(),scaling:we(CC).optional(),capacityProvider:og,ec2Config:ng.optional(),ssmSecretsPath:s.string().regex(w.SSM_PATH,d.SSM_PATH).optional(),extraProperties:s.array(be).optional(),alarms:E_.optional()}).strict().superRefine((e,t)=>{K_(e)||t.addIssue({code:"custom",path:["docker"],message:d.IMAGE_DOCKER_MUTEX})}).describe("Configuration for a service in an ECS cluster"),tE=s.object({name:U,type:RC,needsConnection:s.boolean(),connectedDatabase:s.array(s.string()).optional(),connectedStorage:s.array(s.string()).optional(),connectedMessaging:s.array(s.string()).optional(),cluster:Q_.optional(),services:s.array(eE).optional(),docker:gt.partial().optional(),deployment:s.enum(zs).optional(),codePath:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Cn.optional(),handler:s.string().optional(),runtime:Y_.optional(),environment:Nn.optional(),secrets:Nn.optional(),eventSources:s.array(J_).optional(),functionUrl:s.object({authType:s.enum(Go)}).strict().optional(),description:s.string().optional(),scheduleExpression:s.string().optional(),architecture:s.enum(Ms).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional(),functionName:s.string().optional(),ssmSecrets:s.array(s.string()).optional(),ssmSecretsPath:s.string().optional(),alarms:$_.optional(),instanceType:ig.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional(),variableName:s.string().optional(),extraProperties:s.array(be).optional()}).strict().superRefine((e,t)=>{if(e.type==="ecs"&&e.services)for(let n=0;n<e.services.length;n++){let o=e.services[n];o?.ec2Config?.instanceType&&!o.ec2Config.amiHardwareType&&Pn(o.ec2Config.instanceType)!=="ARM"&&t.addIssue({code:"custom",message:`Service '${o.name??n}' uses instance type '${o.ec2Config.instanceType}' (x86), which requires Docker images built for linux/amd64. The default build targets linux/arm64 (Graviton). Use a Graviton instance type (t4g, c6g, r6g, m6g, etc.) or set amiHardwareType: "STANDARD" to acknowledge x86.`,path:["services",n,"ec2Config","instanceType"]})}e.type==="lambda"&&e.deployment==="container"&&e.architecture==="X86_64"&&t.addIssue({code:"custom",message:"Lambda architecture 'X86_64' requires Docker images built for linux/amd64, but the default build targets linux/arm64. Use 'ARM_64' for Graviton Lambdas (recommended) or ensure your build pipeline targets linux/amd64.",path:["architecture"]})}),yU=s.object({appName:le,clusterName:U,containerPort:br,nameProvidedByFlag:s.boolean().optional(),ecrRepository:s.string().optional(),capacityProvider:og.optional(),useAppEcr:s.boolean().optional(),desiredCount:oc.optional(),cpu:rg.optional(),memoryLimitMiB:Ko(512).optional(),minCapacity:H_.optional(),maxCapacity:X_.optional(),ec2Config:ng.optional(),connectionConfig:qo.optional()}).strict().refine(yr.check,yr.params),bU=s.object({appName:le,functionName:U,nameProvidedByFlag:s.boolean().optional(),lambdaType:s.enum(["basic","web","custom"]).optional(),ecrRepository:s.string().optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Cn.optional(),enableFunctionUrl:s.boolean().optional(),description:s.string().optional(),enableCors:s.boolean().optional(),corsOrigins:s.string().optional(),corsHeaders:s.string().optional(),corsMethods:s.array(s.enum(p_)).optional(),corsCredentials:s.boolean().optional(),connectionConfig:qo.optional()}).strict(),SU=s.object({appName:le,instanceName:U,nameProvidedByFlag:s.boolean().optional(),instanceType:ig.optional(),enableSSH:s.boolean().optional(),minCapacity:H_.optional(),maxCapacity:X_.optional(),connectionConfig:qo.optional()}).strict().refine(yr.check,yr.params),_U=s.object({appName:le,clusterName:U,serviceName:q_,capacityProvider:og,containerPort:br.optional(),cpu:rg.optional(),memoryLimitMiB:Ko(512).optional(),desiredCount:oc.optional(),ec2Config:ng.optional(),routing:s.union([nc,s.array(nc).min(1)]).optional(),docker:gt.partial().optional(),nameProvidedByFlag:s.boolean().optional(),connectionConfig:qo.optional()}).strict(),ag=s.object({appName:le,computeName:U,nameProvidedByFlag:s.boolean().optional(),connectionConfig:qo.optional()}).strict(),kC=ag.extend({type:s.literal("ecs"),cluster:Q_.optional(),services:s.array(eE).min(1,d.SERVICE.MIN_REQUIRED),docker:gt.partial().optional()}).strict().refine(e=>{let t=e.services.filter(n=>n.containers?.some(o=>o.port));return t.length>1?t.every(n=>(Array.isArray(n.routing)?n.routing:n.routing?[n.routing]:[]).some(o=>o.path||o.host)):!0},{message:d.SERVICE.ROUTING_REQUIRED}).refine(e=>{let t=e.services.map(n=>n.name);return new Set(t).size===t.length},{message:d.SERVICE.UNIQUE_WITHIN_CLUSTER}),OC=ag.extend({type:s.literal("lambda"),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(Zs,d.LAMBDA.TIMEOUT.MIN).max(Vs,d.LAMBDA.TIMEOUT.MAX).optional(),memory:Cn.optional(),handler:s.string().optional(),runtime:Y_.optional(),environment:Nn.optional(),secrets:Nn.optional(),description:s.string().optional(),functionUrl:s.union([s.object({authType:s.enum(Go).optional()}).strict(),s.literal(!1)]).optional(),eventSources:s.array(J_).optional()}).strict(),DC=ag.extend({type:s.literal("ec2"),instanceType:ig.optional(),enableSSH:s.boolean().optional(),keyName:s.string().optional(),userData:s.string().optional(),securityGroups:s.array(s.string()).optional()}).strict(),EU=s.discriminatedUnion("type",[kC,OC,DC]),W_=s.object({path:s.string().min(1,d.REQUIRED.ROUTING_PATH),priority:s.number().int(d.PRIORITY.INTEGER).min(1,d.PRIORITY.MIN).max(5e4,d.PRIORITY.MAX).optional()}).strict(),rE=s.object({name:s.string().min(1,d.REQUIRED.SERVICE_NAME).max(255,d.MAX_LENGTH.SERVICE_NAME).regex(w.RESOURCE_NAME,d.RESOURCE_NAME),serviceType:s.enum(["web","worker"]).optional(),docker:gt.partial().optional(),containerPort:br.optional(),needsDatabaseConnection:s.boolean().optional(),routing:s.union([W_,s.array(W_).min(1)]).optional()}).strict().superRefine((e,t)=>{e.serviceType==="worker"&&(e.containerPort!==void 0&&t.addIssue({code:"custom",path:["containerPort"],message:"Worker services are not reachable inbound; remove containerPort."}),e.routing!==void 0&&t.addIssue({code:"custom",path:["routing"],message:"Worker services have no ALB route; remove routing."}))}),AU=s.object({appName:le,instanceType:s.string().optional()}).strict();var sg=s.object({memorySize:Cn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional(),ephemeralStorageSize:s.number().int(d.EPHEMERAL_STORAGE.INTEGER).min(512,d.EPHEMERAL_STORAGE.MIN).max(10240,d.EPHEMERAL_STORAGE.MAX).optional()}).strict(),nE=s.object({type:s.enum(Gf).optional(),databaseName:s.string().optional(),databaseEngine:s.enum(xn).optional(),deletionProtection:s.boolean().optional(),backupRetention:Rt.optional(),port:Ws.optional(),publiclyAccessible:s.boolean().optional(),allowedIpCidr:s.string().optional(),instanceType:s.string().optional(),allocatedStorage:s.number().int(d.ALLOCATED_STORAGE.INTEGER).min(20,d.ALLOCATED_STORAGE.MIN).max(65536,d.ALLOCATED_STORAGE.MAX).optional(),multiAz:s.boolean().optional(),readReplica:Xs.optional(),writer:Yo.optional(),readers:Jo.optional(),allowVpcAccess:s.boolean().optional(),monitoringInterval:Xo.optional(),preferredMaintenanceWindow:s.string().optional(),databaseInsights:Ys.optional(),proxy:Hs.optional(),credentials:Ks.optional(),encryption:Js.optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict(),oE=s.object({server:sg.optional(),imageOptimisation:sg.optional(),revalidation:sg.optional()}).strict(),cg=s.object({versioned:s.boolean().optional()}).strict(),iE=s.object({assets:cg.optional(),cache:cg.optional(),media:cg.optional()}).strict(),wC=s.object({visibilityTimeout:s.number().int(d.SQS.VISIBILITY_TIMEOUT.INTEGER).min(0,d.SQS.VISIBILITY_TIMEOUT.MIN).max(43200,d.SQS.VISIBILITY_TIMEOUT.MAX).optional(),messageRetentionPeriod:s.number().int(d.SQS.RETENTION_PERIOD.INTEGER).min(60,d.SQS.RETENTION_PERIOD.MIN).max(1209600,d.SQS.RETENTION_PERIOD.MAX).optional(),maxMessageSize:s.number().int(d.MAX_MESSAGE_SIZE.INTEGER).min(1024,d.MAX_MESSAGE_SIZE.MIN).max(262144,d.MAX_MESSAGE_SIZE.MAX).optional(),deadLetterQueue:s.union([s.literal(!1),s.object({enabled:s.boolean().optional(),maxReceiveCount:s.number().int(d.DLQ.MAX_RECEIVE_COUNT.INTEGER).min(1,d.DLQ.MAX_RECEIVE_COUNT.MIN).max(1e3,d.DLQ.MAX_RECEIVE_COUNT.MAX).optional()}).strict()]).optional()}).strict(),aE=s.object({revalidationQueue:wC.optional()}).strict(),sE=s.object({domainNames:s.array(s.string()).optional(),certificateArn:s.string().optional()}).strict(),cE=s.record(s.string().regex(w.ENV_VAR_NAME,d.ENV_VAR_NAME),s.string()).optional(),zC=s.object({type:s.literal("payload"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:nE.optional(),compute:oE.optional(),storage:iE.optional(),messaging:aE.optional(),cdn:sE.optional(),environment:cE}).strict(),MC=s.object({type:s.literal("nextjs"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),domain:s.string().optional(),database:nE.optional(),compute:oE.optional(),storage:iE.optional(),messaging:aE.optional(),cdn:sE.optional(),environment:cE}).strict(),ug=s.enum(Fo),jC=s.object({command:s.string().min(1,d.REQUIRED.BUILD_COMMAND),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR)}).strict(),UC=s.object({headers:s.boolean().optional(),contentSecurityPolicy:s.string().optional()}).strict(),LC=s.object({to:s.string().min(1,d.REQUIRED.FORMS_TO).regex(w.EMAIL,d.EMAIL),from:s.string().regex(w.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(w.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),maxConcurrency:s.number().int().min(1).max(100).optional()}).strict(),FC=s.object({behaviours:s.array(s.unknown()).optional()}).strict(),lg=s.object({type:s.literal("staticsite"),name:s.string().min(1,d.REQUIRED.PATTERN_NAME),source:s.string().min(1,d.REQUIRED.SOURCE),build:jC,routing:ug.optional(),security:UC.optional(),domain:s.string().optional(),forms:LC.optional(),cdn:FC.optional()}).strict().superRefine((e,t)=>{if(e.forms===void 0)return;let n=e.domain;if(n===void 0||n===""){t.addIssue({code:"custom",path:["domain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"});return}let o=e.forms.from;o!==void 0&&!Cs(o,n)&&t.addIssue({code:"custom",path:["forms","from"],message:`forms.from must be an address at ${n} (the verified SES identity) \u2014 for example noreply@${n}. Use forms.to for the recipient.`})}),Qo=s.discriminatedUnion("type",[zC,MC,lg]),uE=s.enum(["lightweight","standard","resilient","custom"]),lE=s.object({type:s.enum(Gf),instanceType:s.string().optional(),backupRetention:Rt.optional(),deletionProtection:s.boolean().optional(),encryption:s.union([s.object({useCMK:s.literal(!0)}).strict(),s.literal(!1)]).optional()}).strict(),dE=s.object({memorySize:Cn.optional(),timeout:s.number().int(d.LAMBDA.TIMEOUT.INTEGER).min(1,d.LAMBDA.TIMEOUT.MIN).max(900,d.LAMBDA.TIMEOUT.MAX).optional()}).strict();var mE=s.object({appName:le,type:Hf,pattern:Xf.optional(),patternConfig:Qo.optional(),owner:s.string().optional(),tags:s.record(s.string(),s.string()).optional(),vpcId:s.string().optional(),network:Qs.optional(),backup:S_.optional(),tunnel:__.optional(),additionalNetworks:s.array(j_).optional(),database:s.array(I_),s3:s.array(L_),compute:s.array(tE),dynamodb:s.array(k_).optional(),clickhouse:s.array(O_).optional(),sqs:s.array(F_).optional(),cdn:V_.optional(),customCodeBlocks:s.array(b_).optional(),additionalManagedImports:s.array(s.object({moduleSpecifier:s.string(),namedImports:s.array(s.string()),defaultImport:s.string().optional()}).strict()).optional()}).strict(),VU=s.object({name:le,type:Hf,pattern:Xf.optional(),patternTier:uE.optional(),patternDomain:s.string().optional(),source:s.string().min(1,d.REQUIRED.SOURCE).optional(),buildCommand:s.string().min(1,d.REQUIRED.BUILD_COMMAND).optional(),outputDir:s.string().min(1,d.REQUIRED.OUTPUT_DIR).optional(),routing:ug.optional(),formsTo:s.string().min(1,d.REQUIRED.FORMS_TO).regex(w.EMAIL,d.EMAIL).optional(),corsOrigin:s.string().regex(w.HTTP_ORIGIN,"corsOrigin must be an exact origin such as https://example.com (no path, no trailing slash)").optional(),customDatabase:lE.optional(),customCompute:dE.optional(),region:s.string().optional(),owner:s.string().optional(),includeDatabase:s.boolean().optional(),databaseName:s.string().min(1,d.DATABASE.NAME.REQUIRED).max(63,d.DATABASE.NAME.MAX_LENGTH).optional(),vpcId:s.string().optional(),network:U_.optional(),services:s.array(rE).optional(),snapshotIdentifier:s.string().optional(),snapshotUsername:s.string().optional()}).strict().superRefine((e,t)=>{e.formsTo!==void 0&&(e.patternDomain!==void 0&&e.patternDomain!==""||t.addIssue({code:"custom",path:["patternDomain"],message:"A domain is required when forms are enabled: SES sends only from a verified identity, and the site's domain is the identity the pattern verifies"}))}),BU=s.object({name:U,localResource:s.string().min(1),remoteApp:s.string().min(1),remoteResource:s.string().min(1),permission:s.enum(["read","write","read-write"]),remoteArn:s.string().optional()}).strict();var ZC=["fjall-managed","external","external-manual"],XU=s.enum(ZC);var pE=s.object({givenName:s.string().min(1),familyName:s.string().min(1),displayName:s.string().min(1).optional(),expires:s.string().min(1).optional()}).strict(),fE=s.object({name:s.string().min(1),path:s.string().min(1).optional()}).strict(),VC=s.union([s.object({managedPolicyArn:s.string().min(1)}).strict(),s.object({customerManagedPolicy:fE}).strict()]),BC=s.object({managedPolicies:s.array(s.string().min(1)).optional(),inlinePolicy:s.record(s.string(),s.unknown()).optional(),customerManagedPolicies:s.array(fE).optional(),permissionsBoundary:VC.optional(),sessionDuration:s.string().min(1).optional(),description:s.string().optional(),accounts:s.union([s.array(s.string().min(1)),s.literal("all")]).optional(),includeManagementAccount:s.boolean().optional(),groups:s.array(s.string().min(1)).optional()}).strict(),GC=s.object({description:s.string().optional()}).strict(),ic=s.string().regex(w.EMAIL,d.EMAIL),dg={groups:s.record(s.string(),GC).optional(),permissionSets:s.record(s.string(),BC).optional(),memberships:s.record(s.string(),s.array(ic)).optional(),resolutionVersion:s.number().int().min(1).optional(),defaultPermissionSets:s.boolean().optional()},WC=s.discriminatedUnion("source",[s.object({...dg,source:s.literal("fjall-managed"),users:s.record(ic,pE)}).strict(),s.object({...dg,source:s.literal("external")}).strict(),s.object({...dg,source:s.literal("external-manual"),users:s.record(ic,pE).optional()}).strict()]),YU=s.object({name:U,type:s.literal("organisation").optional(),organisationName:s.string().min(1).optional(),orgEmail:ic.optional(),accounts:s.unknown().optional(),accountIds:s.record(s.string(),s.string()).optional(),identityCentre:s.union([WC,s.literal(!1)]).optional(),allowedRegions:s.array(s.string().min(1)).optional()}).strict();var KC=Object.defineProperty,HC=(e,t)=>KC(e,"name",{value:t,configurable:!0});function XC(e){return`FjallDeployBoundary${e}`}HC(XC,"deployBoundaryName");var mg={Sid:"FjallInheritAdministratorAccess",Effect:"Allow",Action:"*",Resource:"*"},gE=[{Sid:"FjallDenyOrgAndAccountEscape",Effect:"Deny",Action:["organizations:LeaveOrganization","account:CloseAccount"],Resource:"*"},{Sid:"FjallDenyDisableAuditLogging",Effect:"Deny",Action:["cloudtrail:StopLogging"],Resource:"*"},{Sid:"FjallDenyBoundarySelfEscape",Effect:"Deny",Action:["iam:DeleteRolePermissionsBoundary"],Resource:"*"},{Sid:"FjallDenyDisableKmsKey",Effect:"Deny",Action:["kms:DisableKey"],Resource:"*"}],vE=[...gE,{Sid:"FjallDenyStandingHumanCredentials",Effect:"Deny",Action:["iam:CreateUser","iam:CreateLoginProfile","iam:CreateAccessKey","iam:CreateAccountAlias"],Resource:"*"},{Sid:"FjallDenyDisableConfigRecorder",Effect:"Deny",Action:["config:StopConfigurationRecorder"],Resource:"*"}],YC=[...vE,{Sid:"FjallDenyAccountPasswordPolicyTamper",Effect:"Deny",Action:["iam:UpdateAccountPasswordPolicy","iam:DeleteAccountPasswordPolicy"],Resource:"*"},{Sid:"FjallDenyDisableDefaultEbsEncryption",Effect:"Deny",Action:["ec2:DisableEbsEncryptionByDefault"],Resource:"*"}],lL={foundation:[mg,...gE],compliance:[mg,...vE],hardened:[mg,...YC]};var JC=Object.defineProperty,Ne=(e,t)=>JC(e,"name",{value:t,configurable:!0});var pg="sts.amazonaws.com";function qC(e){return`FjallDevDeploy${e}`}Ne(qC,"devDeployRoleName");function QC(e){return`FjallDevProvisioner${e}`}Ne(QC,"devProvisionerRoleName");function ek(e){return`FjallDevSyncWriter${e}`}Ne(ek,"devSyncWriterRoleName");var tk="FjallDevBoundary";function hE(e){return`arn:aws:iam::${e}:policy/${tk}`}Ne(hE,"devBoundaryPolicyArn");function yE(e){return`org:${e}:dev-provisioner`}Ne(yE,"devProvisionerSubject");function bE(e){return`org:${e}:dev-sync`}Ne(bE,"devSyncSubject");function rk(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o}=e,r={[`${o}:aud`]:pg};return[{Sid:"FjallMachineSubject",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:`org:${t}:*`}}},{Sid:"FjallUserSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:r,StringLike:{[`${o}:sub`]:`org:${t}:user:*`}}},{Sid:"FjallServiceSubjects",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{...r,[`${o}:sub`]:[`org:${t}:discovery`,`org:${t}:connection`,`org:${t}:org-setup`]}}}]}Ne(rk,"buildNarrowedDeployTrustStatements");function nk(e){let{fjallOrgId:t,providerArn:n,issuerDomain:o,accountId:r}=e;return[{Sid:"FjallDevSubjectsThisAccount",Effect:"Allow",Principal:{Federated:n},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${o}:aud`]:pg},StringLike:{[`${o}:sub`]:`org:${t}:dev:${r}:*`}}}]}Ne(nk,"buildDevDeployTrustStatements");function fg(e){let{providerArn:t,issuerDomain:n,sid:o,subject:r}=e;return[{Sid:o,Effect:"Allow",Principal:{Federated:t},Action:"sts:AssumeRoleWithWebIdentity",Condition:{StringEquals:{[`${n}:aud`]:pg,[`${n}:sub`]:r}}}]}Ne(fg,"buildServiceSubjectTrustStatements");function ok(e){return fg({...e,sid:"FjallDevProvisionerSubject",subject:yE(e.fjallOrgId)})}Ne(ok,"buildDevProvisionerTrustStatements");function ik(e){return fg({...e,sid:"FjallDevSyncSubject",subject:bE(e.fjallOrgId)})}Ne(ik,"buildDevSyncWriterTrustStatements");function ak({accountId:e}){return[{Sid:"FjallDevEcsTaggedMutations",Effect:"Allow",Action:["ecs:UpdateService","ecs:DeleteService","ecs:RunTask","ecs:StopTask"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTaggedCreates",Effect:"Allow",Action:["ecs:RegisterTaskDefinition","ecs:CreateService"],Resource:"*",Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevEcsTagOnCreate",Effect:"Allow",Action:["ecs:TagResource"],Resource:`arn:aws:ecs:*:${e}:*`,Condition:{StringEquals:{"ecs:CreateAction":["RegisterTaskDefinition","CreateService","RunTask"]}}},{Sid:"FjallDevEcsReads",Effect:"Allow",Action:["ecs:Describe*","ecs:List*"],Resource:"*"},{Sid:"FjallDevEcsDeregisterTaskDefinition",Effect:"Allow",Action:["ecs:DeregisterTaskDefinition"],Resource:`arn:aws:ecs:*:${e}:task-definition/fjall-dev-*`},{Sid:"FjallDevElbTaggedMutations",Effect:"Allow",Action:["elasticloadbalancing:ModifyRule","elasticloadbalancing:DeleteRule","elasticloadbalancing:ModifyTargetGroup","elasticloadbalancing:ModifyTargetGroupAttributes","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:RegisterTargets","elasticloadbalancing:DeregisterTargets"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTaggedCreates",Effect:"Allow",Action:["elasticloadbalancing:CreateTargetGroup","elasticloadbalancing:CreateRule"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevElbTagOnCreate",Effect:"Allow",Action:["elasticloadbalancing:AddTags"],Resource:`arn:aws:elasticloadbalancing:*:${e}:*`,Condition:{StringEquals:{"elasticloadbalancing:CreateAction":["CreateTargetGroup","CreateRule"]}}},{Sid:"FjallDevElbReads",Effect:"Allow",Action:["elasticloadbalancing:Describe*"],Resource:"*"},{Sid:"FjallDevSsmDevTree",Effect:"Allow",Action:["ssm:GetParameter*","ssm:PutParameter","ssm:AddTagsToResource"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevLogsTaggedMutations",Effect:"Allow",Action:["logs:PutRetentionPolicy","logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsTaggedCreate",Effect:"Allow",Action:["logs:CreateLogGroup","logs:TagResource"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`,Condition:{StringEquals:{"aws:RequestTag/fjall:dev":"true"}}},{Sid:"FjallDevLogsRead",Effect:"Allow",Action:["logs:GetLogEvents","logs:DescribeLogStreams","logs:FilterLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevLogsDescribeGroups",Effect:"Allow",Action:["logs:DescribeLogGroups"],Resource:"*"},{Sid:"FjallDevKmsViaDevAlias",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevKmsSsmSecureString",Effect:"Allow",Action:["kms:Encrypt","kms:Decrypt","kms:GenerateDataKey"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}},{Sid:"FjallDevEcrAuthToken",Effect:"Allow",Action:["ecr:GetAuthorizationToken"],Resource:"*"},{Sid:"FjallDevEcrPushPull",Effect:"Allow",Action:["ecr:PutImage","ecr:InitiateLayerUpload","ecr:UploadLayerPart","ecr:CompleteLayerUpload","ecr:BatchCheckLayerAvailability","ecr:BatchGetImage","ecr:GetDownloadUrlForLayer","ecr:DescribeImages"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevPassDevPathRoles",Effect:"Allow",Action:["iam:PassRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`}]}Ne(ak,"buildDevDeployPolicyStatements");function sk({accountId:e}){return[{Sid:"FjallDevProvisionerBoundedRoleWrites",Effect:"Allow",Action:["iam:CreateRole","iam:PutRolePolicy","iam:AttachRolePolicy"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`,Condition:{StringEquals:{"iam:PermissionsBoundary":hE(e)}}},{Sid:"FjallDevProvisionerPathRoleOps",Effect:"Allow",Action:["iam:DeleteRole","iam:DeleteRolePolicy","iam:DetachRolePolicy","iam:ListRolePolicies","iam:TagRole"],Resource:`arn:aws:iam::${e}:role/fjall/dev/*`},{Sid:"FjallDevProvisionerListRoles",Effect:"Allow",Action:["iam:ListRoles"],Resource:"*"},{Sid:"FjallDevProvisionerDevMasterSecrets",Effect:"Allow",Action:["secretsmanager:GetSecretValue"],Resource:`arn:aws:secretsmanager:*:${e}:secret:fjall-dev-*`},{Sid:"FjallDevProvisionerDataApi",Effect:"Allow",Action:["rds-data:ExecuteStatement","rds-data:BatchExecuteStatement","rds-data:BeginTransaction","rds-data:CommitTransaction","rds-data:RollbackTransaction"],Resource:`arn:aws:rds:*:${e}:cluster:fjall-dev-*`},{Sid:"FjallDevProvisionerMetrics",Effect:"Allow",Action:["cloudwatch:GetMetricData"],Resource:"*"},{Sid:"FjallDevProvisionerOrphanDiscovery",Effect:"Allow",Action:["tag:GetResources"],Resource:"*"},{Sid:"FjallDevProvisionerSsmTeardown",Effect:"Allow",Action:["ssm:DeleteParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevProvisionerLogsTeardown",Effect:"Allow",Action:["logs:DeleteLogGroup"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevProvisionerTaggedTeardown",Effect:"Allow",Action:["ecs:UpdateService","ecs:StopTask","ecs:DeleteService","elasticloadbalancing:DeleteRule","elasticloadbalancing:DeleteTargetGroup","elasticloadbalancing:DeregisterTargets"],Resource:[`arn:aws:ecs:*:${e}:*`,`arn:aws:elasticloadbalancing:*:${e}:*`],Condition:{StringEquals:{"aws:ResourceTag/fjall:dev":"true"}}},{Sid:"FjallDevProvisionerImageJanitor",Effect:"Allow",Action:["ecr:ListImages","ecr:DescribeImages","ecr:BatchDeleteImage"],Resource:`arn:aws:ecr:*:${e}:repository/*`},{Sid:"FjallDevProvisionerSsmReadAll",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/*`},{Sid:"FjallDevProvisionerKmsDecryptViaSsm",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{StringLike:{"kms:ViaService":"ssm.*.amazonaws.com"}}}]}Ne(sk,"buildDevProvisionerPolicyStatements");function ck({accountId:e}){return[{Sid:"FjallDevSyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}}]}Ne(ck,"buildDevSyncWriterPolicyStatements");function uk({accountId:e}){return[{Sid:"FjallDevBoundarySsmDevRead",Effect:"Allow",Action:["ssm:GetParameter*"],Resource:`arn:aws:ssm:*:${e}:parameter/fjall/dev/*`},{Sid:"FjallDevBoundaryKmsDecryptDevAlias",Effect:"Allow",Action:["kms:Decrypt"],Resource:`arn:aws:kms:*:${e}:key/*`,Condition:{"ForAnyValue:StringLike":{"kms:ResourceAliases":"alias/fjall-dev-*"}}},{Sid:"FjallDevBoundarySyncPrefixReadWrite",Effect:"Allow",Action:["s3:GetObject","s3:PutObject"],Resource:`arn:aws:s3:::fjall-dev-sync-${e}-*/*`,Condition:{StringEquals:{"aws:ResourceAccount":e}}},{Sid:"FjallDevBoundarySlotLogs",Effect:"Allow",Action:["logs:CreateLogStream","logs:PutLogEvents"],Resource:`arn:aws:logs:*:${e}:log-group:/fjall/dev/*`},{Sid:"FjallDevBoundarySyncQueue",Effect:"Allow",Action:["sqs:ReceiveMessage","sqs:DeleteMessage","sqs:GetQueueUrl"],Resource:`arn:aws:sqs:*:${e}:fjall-dev-sync-${e}-*`}]}Ne(uk,"buildDevBoundaryStatements");var lk=Object.defineProperty,ct=(e,t)=>lk(e,"name",{value:t,configurable:!0});function x(e){return JSON.stringify(e)}ct(x,"escapeStringLiteral");function Sr(e){return e.map(x).join(", ")}ct(Sr,"formatStringArray");var dk="import:SharedAlarmTopicArn";function ei(e=" "){return`
123
123
  ${e}...(getConfig().environment === "production" ? { alertsTopic: ${x(dk)} } : {}),`}ct(ei,"emitProductionAlertsTopicSpread");function gg(e){if(typeof e!="object"||e===null)return!1;let t=e;return typeof t.__identifier=="string"||typeof t.__expression=="string"||typeof t.__call=="string"}ct(gg,"isSpecialValue");function Pt(e){return e.replace(/[^a-zA-Z0-9]/g," ").split(" ").map((t,n)=>n===0?t.charAt(0).toLowerCase()+t.slice(1):t.charAt(0).toUpperCase()+t.slice(1)).join("")}ct(Pt,"toVariableName");function Q(e){return e.variableName??Pt(e.name)}ct(Q,"getVariableName");function ti(e,t){for(let n of e.database)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.s3)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.compute)if(n.name===t&&n.variableName)return n.variableName;for(let n of e.dynamodb??[])if(n.name===t&&n.variableName)return n.variableName;for(let n of e.sqs??[])if(n.name===t&&n.variableName)return n.variableName;return Pt(t)}ct(ti,"resolveResourceVariable");function SE(e){let t=Object.entries(e);return t.length===0?!0:t.length>1?!1:t.every(([,n])=>typeof n=="string"||typeof n=="number"||typeof n=="boolean"||n===null)}ct(SE,"isSimpleObject");function Z(e,t=" "){if(e==null)return"undefined";if(typeof e=="string")return JSON.stringify(e);if(typeof e=="number"||typeof e=="boolean")return String(e);if(gg(e)){if("__identifier"in e)return e.__identifier;if("__expression"in e)return e.__expression;if("__call"in e)return e.__call}if(Array.isArray(e))return`[${e.map(n=>Z(n,t)).join(", ")}]`;if(typeof e=="object"){let n=Object.entries(e).filter(([,i])=>i!==void 0);if(SE(e)){let i=n.map(([a,c])=>`${a}: ${Z(c,t)}`).join(", ");return i?`{ ${i} }`:"{}"}let o=t+" ",r=n.map(([i,a])=>`${o}${i}: ${Z(a,o)}`).join(`,
124
124
  `);return r?`{